Integrate a generic OIDC and OAuth Server application

1.      Log in to an Identity as a Service account with a role assigned that allows you to configure applications on Identity as a Service.

2.      Click > Security > Applications. The Applications List page appears.

3.      Click Add. The Select an Application Template page appears.

4.      Do one of the following:

●       Select OpenID Connect and OAuth Cloud Integrations from the search drop-down list and scroll to find the application you want to add to IDaaS.

- or -

●       In the Search bar, enter a search option to filter for the application you want to add to IDaaS.

5.      Click Generic Server Application. The Add Generic Server Application page appears.

6.      Configure the following App Settings:

a.      Enter the Application Name.

b.       Enter the Application Description.

7.      Configure the OIDC Settings.

a.      The Grant Types are configured by default.

b.      The Client ID is generated when you create the application on Identity as a Service. You cannot modify the Client ID.

c.      Select the Token / Revocation Endpoint Client Authentication Method from the drop-down list. When using the token or revocation endpoint, clients use this authentication method to authenticate to the Authorization Server.

d.      Copy the Client Secret value. You can then paste the Client Secret value into the required field of your client OIDC application account settings.

Note: You can define your own Client Secret value. However, Entrust recommends that you use the strong secret value provided. You can also optionally view or regenerate a new client secret.

e.      Select the OIDC Signing Certificate used to connect to the Service Provider.

8.      Click Show Advanced Settings to configure advanced settings.

a.      Enter the Default Resource/Audience Request Value to include this value as the resource or audience parameter for every authorization request.

9.      Click Save.

Note: After configuring the General settings, Claims, Customization and Resource Rule tabs appear.

10.  Proceed to Step 2: Configure Customizations.

1.      Click the Customization tab. The Customization page appears.

2.      Optional. Add a custom application logo, as follows:

a.      Click next to Application Logo. The Upload Logo dialog box appears.

b.      Click to select an image file to upload.

c.      Browse to select your file and click Open. The Upload Logo dialog box displays your selected image.

d.      If required, resize your image.

e.      Click OK.

3.      Select the Authentication Flow that appears to users during login. You must select at least one. For more information on Passkey log in, see Manage Passkey/FIDO2 authenticators.

4.      Click Save.

5.      Proceed to Step 3: Configure a resource rule.

1.      Click the Resource Rules tab.

2.      Click Add Resource Rule.

3.      Follow the instructions in Create and manage resource rules.

1.      Click the Resource Servers tab.

2.      Click Add Resource Server.

3.      Follow the instructions in Add an API/URL resource server.