migrate from oidc non external system to external system

XMLWordPrintable

    • Type: Improvement
    • Resolution: Fixed
    • Priority: Minor
    • 2.6.16
    • Affects Version/s: None
    • Component/s: None
    • None

       

      In grouper.properties, change from .oidc. to .oidcExternalSystem. for the config items below. Also edit the OIDC external system and make sure all settings are there and it saves correctly. Test a WS call

      The configId (testConfigId below) needs to match with the external system config as well.

      ############################################
      ## oidc client service config
      ############################################ 
       
       
      # enabled or disabled
      # {valueType: "boolean", defaultValue: "true", order: 1000 }
      # grouper.oidc.testConfigId.enabled =
       
       
      # this is the oidc system config id
      # {valueType: "string", required: true, order: 2000, formElement: "dropdown", optionValuesFromClass: "edu.internet2.middleware.grouper.app.oidc.OidcGrouperExternalSystem"}
      # grouper.oidc.testConfigId.oidcExternalSystemConfigId =
       
       
      # needed for retrieving an access token, e.g. https://my.app/someUrlBackFromIdp
      # {valueType: "string", order: 3000 }
      # grouper.oidc.testConfigId.redirectUri =
       
       
      # scope to retrieve from oidc, e.g. openid email profile (required)
      # {valueType: "string", required: true, order: 4000}
      # grouper.oidc.testConfigId.scope =
       
       
      # subject source id
      # {valueType: "string", order: 5000, formElement: "checkbox", checkboxValuesFromClass: "edu.internet2.middleware.grouper.SubjectFinder"}
      # grouper.oidc.testConfigId.subjectSourceIds = 
       
      # subject id type
      # {valueType: "string", required: true, order: 6000, formElement: "dropdown", optionValues: ["subjectId", "subjectIdentifier", "subjectIdOrIdentifier"] }
      # grouper.oidc.testConfigId.subjectIdType = 
       
       
      # some claim name that has the subjectId / subjectIdentifier / subjectIdOrIdentifier in it.  e.g. employeeId (required)
      # {valueType: "string", required: true, order: 7000 }
      # grouper.oidc.testConfigId.subjectIdClaimName =
       
       
      # e.g. code
      # {valueType: "string", order: 8000 }
      # grouper.oidc.testConfigId.oidcResponseType = 

            Assignee:
            Vivek Sachdeva
            Reporter:
            Chris Hyzer (upenn.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: