...
- On the Main tab of the Identity and Access Management Console, click Home > Identity > Service Providers> Add.
- Enter
consentmgt
as the Service Provider’s name. - Click Register.
Click Inbound Authentication configuration > OAuth/OpenID Connect configuration > Configure.
Set the values for the following parameters and keep the default value for the other parameters.Parameter Value OAuth Version 2.0 Allowed Grant Type code
Callback URL regexp=(https://<IAM_HOST>:<IAM_PORT>/consentmgt\|https://<IAM_HOST>:<IAM_PORT>/consentmgt)
Info The first and second URLs are respectively redirected and logout URLs.
Note The OAuth client key/client ID and OAuth client secret are generated. Those are used in Configuring consent management jaggery application.
Open the
wso2-obkm-version/repository/deployment/server/jaggeryapps/consentmgt/config/
file.conf.js
Modify the
apimHost
,applicationId
,authCredential
,redirectUrl
, andlogoutUrl
parameters as follows.Note In
authCredential
, be sure to encode theCLIENT_ID:CLIENTSECRET
withBASE64ENCODE
encoding.Code Block { "app" : "consentmgt", "applicationType" : "oauth2", "tenantDomain": "carbon.super", "apimHost":"http://<OBAM_HOSTNAME>", "apimNioPort":"8280", "apimHttpPort":"9763", "kmHost" : "https://<WSO2_OBKM_HOSTNAME>", "kmPort" : "9446", "kmTokenAPI" : "oauth2/token", "kmAuthorizeAPI" : "oauth2/authorize", "applicationId":"", "authCredential":"", "redirectUrl":"https://<OBKM_HOSTNAME>:9446/consentmgt", "logoutUrl": "https://<HOSTNAME>:9446/consentmgt", "tokenApiName" : "token", "tokenApiVersion" : "", "authorizeApiName" : "authorize", "authorizeApiVersion" : "", "pagination" : { "limit" : 11, "actualLimit" : 10, "offset": 0 }, "DeployedSpecification" : "UK" }
Info Update the specification under
DeployedSpecification
parameter approproately. Possible values areUK, BERLIN,
andSTET.
By default, the value is set toUK.
Tip title Troubleshooting If you get hostname verification errors when accessing the Customer Care portal
(https://<OBKM_HOST>:9446/ccportal)
, add the following to the<WSO2_OBKM_HOME>/wso2server.sh
file and restart.Dhttpclient.hostnameVerifier="DefaultAndLocalhost" \
Dorg.wso2.ignoreHostnameVerification=true \
Now that you have configured the consent revocation application, try out the consent revocation apps in WSO2 Open Banking: