Uploaded image for project: 'Red Hat 3scale API Management'
  1. Red Hat 3scale API Management
  2. THREESCALE-4482

Zync dynamic client registration with Forgerock

    XMLWordPrintable

Details

    • Task
    • Resolution: Not a Bug
    • Major
    • None
    • 2.6 GA, 2.7 GA
    • Zync
    • None
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started

    Description

      A customer reported:

      the "OpenID Connect Issuer Type" REST API when defining an API product in 3scale the entpoint to register a client is "<endpoint>/clients" which is hard-coded in zync/app/adapters/rest_adapter.rb. However Forgerock's API has the endpoint "<endpoint>/register".

      The client id is created and stored in 3scale first. But Forgerock as IdP will not use this client id but create a new one. And this is the correct behavior (see OAuth 2.0 Dynamic Client Registration Protocol - "This operation registers a client with the authorization server. The authorization server assigns this client a unique client identifier [..]")

      Can someone please clarify:

      • the endpoints that 3scale calls for the clients registration adhere to some standard?
      • 3scale supports clients registration only on IdP that expose that specific endpoint?
      • Regarding this shouldn't 3scale adhere to these specs?
      • do we have a list of IdP compatible with Zync clients registration?

      Attachments

        Activity

          People

            Unassigned Unassigned
            rhn-support-cpalmier Carlo Palmieri (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: