External-client (Section)#

Path: /profiles/profile/settings/apps-service/applications/application/token-handler/external-client

Parameters#

NameTypeRequiredDefaultDescription
client-idstring (length: 1..9223372036854775807)required-Client ID that is used to make the authorization request.
client-secretstring (length: 1..9223372036854775807)required-The client secret that is used to make the authorization request.
scopemulti-value stringoptional-The scopes to ask for in an authorization request.
authorization-endpointstringrequired-The URL of the authorization endpoint.
token-endpointstringrequired-The URL of the token endpoint.
use-pkcebooleanoptionaltrueUse PKCE when making an authorization request. Enabled by default.
token-issuerstringoptional-The issuer of the authorization server that issues the tokens. This will be used for ID token validation to check the iss claim, and for authorization response validation - to check the iss parameter. If this is not set then no such validation will be done.
redirect-uristringrequired-The redirect URL to be used in authorization requests.

Subsections#

NameTypeDescription
logoutSectionEnables RP-initiated logout from the authorization server.

Was this helpful?