• Using OAuth 2.0 for Authentication in the Manager Tool

    I’d like to know if it’s possible to use OAuth to log in to Manager, Designer, and other One Identity Manager tools?

  • OAuth and Single Sign On (SSO) To Job Server Portal Redirecting to Login

    Greetings Everyone,

    We are having an issue which our SSO Logins to the Job and App Server portals just redirect back to the Login page.

    Our Web portal seem to work without issue. I've uploaded a few pics to show the issue:

    1. We perform our MFA and…

  • Problem setting up OAuth 2.0/OpenID Connect authentication

    Hi, I have some problem when setting up Oauth / OpenID authentication. The IDP is a ADFS on-prem server.

    I get this error in the log files on the Web server.

    ---> VI.Base.ViException: Invalid token
    at VI.DB.Auth.AuthToken.Validate(X509Certificate2…

  • Assistance Required with OAuth Configuration

    Hello Fellow Sufferers! :-D

    Need help with the OAuth 2.0 configuration in my environment (9.1.)

    I have set up the Identity Provider and the application according to the available documentation.

    However, every time I attempt to authenticate, I receive a…

  • OAuth2 with Azure, rotating Shared Secret

    We have setup OAuth 2.0/OpenID for Athentication of Users.
    That work fine so far.

    Now the Shared Secret expired and was replaced by a new one. (Fully Automated).
    But the corresponding QBMIdentityClient.SharedSecret wasn't updated.

    Another issue is,…

  • Issue with OAuth2.0 Authentication - JWT Error on Redirect Page

    Hello everyone,

    I have configured OAuth2.0 as an authentication method in my environment (OIM 9.2 On Demand). However, when I attempt to authenticate, I'm encountering an issue during the redirect process. The error message I receive on the page is as…

  • REST API Script endpoint requires active session and does not regard Token sent in Header

    Hello,

    We are currently implementing OAuth2 authentication, specifically so a third party app can communicate with the REST API. The configuration in Designer is essentially done and works when contacting the API endpoints /entity/ and /assignment/.

    However…

  • OAuth PowerShell One Identity App server call

    Can someone validate my thinking here?

    If I wanted to make Application server calls after obtaining a token from Azure, I should be able to use this PowerShell function, right?

    <# Code disclaimer - Do not trust this. If you don't understand what I wrote…

  • Not able to Authenticate using Access token(in authentication header) for authentication to API server

    With the implementation of the API server, we want to expose our One Identity Manager capabilities via API's within our organization. In our test setup we successfully managed to authenticate to the authentication API using the oauthrolebased api, and…

  • Not able to Authenticate using Access token(in authentication header) for authentication to API server

    With the implementation of the API server, we want to expose our One Identity Manager capabilities via API's within our organization. In our test setup we successfully managed to authenticate to the authentication API using the oauthrolebased api, and…

  • Connecting Azure Service Principal with OpenID with API Server not AppServer

    I am currently working on integrating my Azure App with an external API Server using OAuth and have successfully established a user-based connection to the web portal. However, my objective now is to enable service-to-service communication, allowing the…

  • OAUTH 2.0 does not work

    Hi.
    I'm trying to integrate the Identity Manager Web Portal with Microsoft Azure using OAuth 2.0. Basically when opening the web portal the user will be directed to the Azure login screen and when logging in the user will return to the web portal page…

  • Additional Parameter in 'OAuth 2.0/OpenID Connect' Request - Authentication Context Class Reference (acr)

    Hello community,

    We already use 'OAuth 2.0/OpenID Connect' to log in to our OIM-Backend-Tools (Manager, Designer, ....).

    Now we want to make Strong Authentication mandatory (Yubikeky+PIN) and prevent login with username+password.

    For this we have…

  • Use History DB with 'OAuth 2.0/OpenID Connect'

    Hello community,

    We already use 'OAuth 2.0/OpenID Connect' to log in to our OIM-Backend-Tools (Manager, Designer, ....).

    Now we want to also use that authentication method with our History Database, but: 

    1. prerequisite for 'OAuth 2.0/OpenID…