7.10 Configuring OAuth SSO

This section discusses various settings that enable Self Service Password Reset to integrate with an OAuth Identity Server for a single sign-on.

To configure OAuth SSO:

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor > Settings > Single Sign On> OAuth SSO.

  4. Configure the following settings:

    OAuth Login URL

    Specify the URL for OAuth server login. This is the URL to redirect the users to for authentication.

    OAuth Code Resolve Service URL

    Specify the URL for OAuth Code Resolve Service. Self Service Password Reset uses this web service URL for resolving the artifact that the OAuth identity server returns.

    OAuth Profile Service URL

    Specify the URL for the web service that the Identity Server provides to return attribute data about the user.

    OAUTH Web Service Server Certificate

    Import a certificate for the OAuth web service server.

    OAuth Client ID

    Specify the client ID of the OAuth client. The OAuth Identity Service provider gives you this identity.

    OAuth Shared Secret

    Specify a password for the OAuth shared secret. The OAuth Identity Service provider gives you this value.

    OAuth User Name/DN Login Attribute

    Specify the attribute that you want the OAuth server to identify as the user name for local authentication. Self Service Password Reset then resolves this value as the same password that the users type at the local authentication page.

  5. Select Save changes.