Configuring AIS JWT Generation (Tools Release 9.2.26.6 or Later)

Configure AIS JWT generation to enable the AIS Server to create JSON Web Tokens (JWTs) for internal authentication flows. In previous releases, you could use the demo certificate provided with the system. Beginning with Tools Release 9.2.26.6, the demo certificate is no longer available.

The AIS Server uses the internal JWT flow to establish a session on behalf of a user. In this flow, the AIS Server generates a JSON Web Token (JWT) and uses it to authenticate the user session.

The AIS Server uses the internal JWT flow in the following scenarios:

• Running scheduled orchestrations

• Sending run-as-subscriber notifications

• Launching EnterpriseOne from links in Orchestrator Studio

After JWT trust is configured, the AIS Server health check validates the JWT trust login configuration. A successful health check indicates that the JWT trust login is configured correctly.

Beginning with Tools Release 9.2.26.6 or later, the AIS Server must use the same certificate that is configured for the Internal JWT on the HTML Server (the demo certificate is no longer available).

Add the certificate to the AIS Server keystore and configure the AIS Server to use it for JWT generation.

To configure JWT generation, complete the following fields in the Security Information section of the AIS Server in Server Manager:

• Keystore Location
• Keystore Password
• Certificate Password
• Certificate Alias

The AIS Server uses the configured certificate to generate JWTs, and the HTML Server uses the same trusted certificate to validate the JWTs.

For more information on how to configure HTML Server with a certificate, see Configuring HTML Server with a Certificate.