Question
ACP Computer Training and Consultancy
IN
Last activity: 9 Sep 2024 12:30 EDT
OIDC Authentication- Token endpoint validation
I'm configuring OIDC authentication in Pega, but I've encountered an issue. Pega currently supports only signed or plain ID tokens, while my Identity Provider (IDP) returns encrypted ID tokens that require decryption. Could you guide me on where the ID token can be decrypted within Pega, and if there are any extension points related to token endpoint validation that could help with this?
Pegasystems Inc.
GB
@VidhyaR0457 Pega does not natively support decryption of encrypted ID tokens. However, you can extend the OIDC authentication service to handle this. You can use a custom Java step in an activity to decrypt the ID token after it is received. The OIDCClientHandler class can be extended to include custom logic for decrypting the token. Additionally, you can use the D_pzSSOAttributes data page to access and manipulate the token claims after decryption. Ensure you have the necessary decryption keys available in your keystore.
⚠ This is a GenAI-powered tool. All generated answers require validation against the provided references.
References: 🌕 Troubleshooting OpenID Connect (OIDC) integrations