OIDC SSO: endpoints #9654
OIDC SSO: endpoints #9654
Conversation
| * `post_logout_redirect`: The URL to which users are redirected after they successfully log out from the application. This helps ensure a seamless user experience by taking them to a predefined page after logout. | ||
| * `redirect_uri`: The callback URL that receives the authorization response from the IdP after the user successfully authenticates. This endpoint processes the returned authorization code or token to complete the login process. | ||
| For example, `https://<YOUR_APP_URL>/oauth/v2/callback`. | ||
| * `/.well-known/openid_configuration`: A standardized URL exposed by the IdP to initiate OAuth2 authorization. |
There was a problem hiding this comment.
I like the explanation that Copliot gives me better:
"In the OIDC (OpenID Connect) protocol, the .well-known endpoint provides a standardized URL where clients can retrieve the OpenID Provider's configuration metadata, enabling dynamic discovery of important endpoints and capabilities."
| * `jwks_uri`: URL exposing the JSON Web Key Set (JWKS), which contains the public keys used to validate token signatures. | ||
| * `introspection_endpoint` (optional): An endpoint provided by the IdP to validate or introspect tokens (optional, depending on the IdP). | ||
| * `end_session_endpoint`: Used to initiate logout at the IdP. This endpoint ensures that the user is logged out from both the Mendix app and the IdP, effectively terminating the entire SSO session. | ||
|
|
There was a problem hiding this comment.
Can we add some explanation, like:
"If you have a firewall between your application and your IdP, please make sure it's properly configured for the consumption of these endpoints".
Or maybe we should add this to the trouble shooting section.
"9.7 Endpoints cannot be reached.
This may be cause by wrong configuration of your firewall. If you have a firewall between your application and your IdP, please make sure it's properly configured for the consumption of these endpoints".
https://mendix.atlassian.net/browse/TW-2508