OAuth Configuration

This section describes the various OAuth Grant Types supported by the system and highlights any special steps needed when using the grant type for a given use case. The information here is used to correctly configure the message sender context for senders that need this authorization type.

The following context entries apply to all OAuth grant types.

• OAuth Access Token URL
• Either the OAuth Client Credentials Key Ring or the OAuth Client ID and OAuth Client Secret. Refer to OAuth Configuration for more information about defining OAuth key rings.
• OAuth REST API Scope
• OAuth Token Request Details in Body

Client Credentials

The client credentials grant type requests the access token using the client ID and secret credentials as defined above.

JWT Assertion

The system supports both the JWT client assertion grant type and the JWT user assertion grant type. Client assertion proves the identity of the application making the request. User assertion, is for use cases where the specific application end-user is making the request.

Besides the context values applicable for all OAuth grant types, the JWT grant types also requires the following:

• OAuth Signature Key Ring. This defines the public / private signature key pair used to sign the assertion. Note that a prerequisite step required for contacting Oracle Identity Cloud Service is to upload a certificate based on this key.
• OAuth JWT Audience