Posts

Showing posts from November, 2018

Mutual TLS with client id and secret using OIDC

How to use Mutual TLS with client id and client secret In wso2 IS 5.5.0 This authenticator has the same architecture as the mutual authenticator,   https://docs.wso2.com/display/IS550/Mutual+TLS+for+OAuth+Clients. The only difference is we need to pass the client secret as an query param in the token request. In order to consume the request we need to follow the steps as below. 1.  Verify whether the org.wso2.carbon.identity.oauth2.token.handler.clientauth.tlswithidsecret-1.0.7.jar exists in <IS_Home/repository/components/dropins 2. To enable this feature put following configurations in identity.xml which is located in <IS_HOME>/repository/conf/identity    <EventListener type = "org.wso2.carbon.identity.core.handler.AbstractIdentityHandler" name = "org.wso2.carbon.identity.oauth2.token.handler.clientauth.tlswithidsecret.MutualTLSWithIdSecretAuthenticator" orderId = "200" enable = "true" > </EventListener&