Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleOAuth Profile-Specific

Options specific to generic or OAuth usage of the Token flow:

Name

Type

Default

Description

resolveAttributes

Boolean

true

Whether to resolve attributes during the token issuance process

encryptionOptional

Boolean

truefalse

Whether the absence of encryption details in a resource server’s metadata should fail when issuing an access token

accessTokenType

String

Format of access token. Supported values are “JWT” or nothing/empty/null, implying opaque tokens.

accessTokenLifetime

Duration

PT10M

Lifetime of access token issued to client for resource server

The following properties can be used to globally adjust some of the settings above (some of them affect other profiles as well).

  • idp.oauth2.encryptionOptional

  • idp.oauth2.accessToken.type

  • idp.oauth2.accessToken.defaultLifetime

...