Configuring the .well-known endpoint to return OpenID Connect (OIDC) metadata about the authorization server with IBM Security Verify Access (ISAM/ISVA).
All tagged JSON
Configuring the .well-known endpoint to return OpenID Connect (OIDC) metadata about the authorization server with IBM Security Verify Access (ISAM/ISVA).
The ID Token and Access Token in an OAuth or OIDC flow are automatically created in ISAM / Verify Access as part of the API protection, but what happens if we want to customize these tokens and return a custom JWT instead?