WS02 Identity Server

The WS02 connector provides a way for Maverics to integrate with a WS02 Identity Server instance. WS02 may be the target of a migration workflow and can be the authentication and attribute provider for applications protected by a proxy app.

Configuration options

The following values can be provided to the WSO2 connector via the Maverics configuration file.

OAuth Client ID

oauthClientID is the client ID of the inbound OAuth service provider created in WSO2.

OAuth Client Secret

oauthClientSecret is the client secret of the inbound OAuth service provider created in WSO2.

OAuth Redirect URL

oauthRedirectURL is the URL that WSO2 will use to redirect the client back to after authentication. The Maverics OIDC handler will be served on this URL.

Note: the oauthRedirectURL’s path should not conflict with the path of any application resources. The oauthRedirectURL path can be arbitrary, for example /maverics-oidc or /oidc-handler.

OIDC Well-known URL

oidcWellKnownURL is the URL that returns OpenID Connect metadata about the WSO2 authorization server.

OIDC Logout Callback URL

oidcLogoutCallbackURL is the URL that WS02 will use to redirect the client back to Maverics after a session is terminated.

Disable PKCE

disablePKCE disables the OIDC Proof Key for Code Exchange (PKCE) extension (enabled by default).

HTTP Basic User

httpBasicUser is the username used for authenticated API requests made to WSO2.

HTTP Basic Password

httpBasicPassword is the password used for authenticated API requests made to WSO2.

SCIM URL

scimURL is the WSO2 URL used for CRUD actions on users.

Examples

Connector Configuration

connectors:
  - name: wso2
    type: wso2
    httpBasicUser: username
    httpBasicPassword: password
    oauthClientID: clientID
    oauthClientSecret: clientSecret
    oauthRedirectURL: https://app.organization.com/oidc
    oidcWellKnownURL: https://wso2.organization.com:9443/oauth2/oidcdiscovery/.well-known/openid-configuration
    scimURL: https://wso2.organization.com:9443/wso2/scim
    oidcLogoutCallbackURL: https://app.organization.com/oidc/logout
    disablePKCE: false