Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
  "authorization":{  
   "activeMethod":"oauth",
   "methods":{  
      "oauth":{  
         "attributes":{  
            "idPServer":"%https.ip%/oauth2/token",
            "dynamicClientProperties":{  
               "callbackUrl":"%https.ip%/portal",
               "clientName":"portal",
               "owner":"admin",
               "applicationType":"JaggeryApp",
               "grantType":"password refresh_token urn:ietf:params:oauth:grant-type:saml2-bearer",
               "saasApp":false,
               "dynamicClientRegistrationEndPoint":"%https.ip%/dynamic-client-web/register/",
               "tokenScope":"Production"
            }
         }
      }
   }
}

 

 

Expand
titleClick here for more information on the attributes.
PropertyDescriptionData
Type 
Example
activeMethodDefine the active mode. In this case you need to define the active mode as OAuth.YesStringOAuth
idPServerDefine the Identity Provider URL.YesString
%https.ip%/oauth2/token
callbackURLDefine the call back URL.YesString
https.ip%/portal
clientNameDefine the OAuth application name.YesString
portal
ownerDefine the username of the owner of the application. In this use case it is the administrator.YesString
admin
applicationTypeThe default application type is a jaggery application. If you wish to change it, you need to update this field with the respective application type.YesString
JaggeryApp
grantTypeIn this use case, out of the six OAuth 2.0 grant types WSO2 EMM uses the password and refresh_token  grant types You can add more grant types as space separated values.YesString
password
saasAppDefine if this application is a Software as a Service (SaaS) application or not, by defining true or false as the respective values.YesBooleanfalse

dynamicClientRegistrationEndPoint

Define the dynamic client registration endpoint.YesString
%https.ip%/dynamic-client-web/register/
tokenScopeDefine the scope of the issued access token. It is used to limit the authorization granted to the client by the resource owner.YesString
Production