OIDCIdentityAsserterMBean

Overview  |   Related MBeans  |   Attributes  |   Operations

Overview

The MBean that represents configuration atrributes for the WebLogic OpenID Connect Identity Assertion provider. The WebLogic OpenID Connect Identity Assertion provider supports identity assertion using OIDC tokens from the OpenID Connect 1.0 on top of OAuth 2.0 protocol. The provider supports the identity assertion using the ID tokens granted from the OIDC Provider (OP).

   
Fully Qualified Interface NameIf you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.security.providers.authentication.OIDCIdentityAsserterMBean
Factory Methods No factory methods. Instances of this MBean are created automatically.
Access Points Inherited from AuthenticationProviderMBean Because this MBean extends or implements AuthenticationProviderMBean, you can also access this MBean by retrieving AuthenticationProviderMBeans. The following attributes contain AuthenticationProviderMBeans and its subtypes:

    Related MBeans

    This section describes attributes that provide access to other MBeans.

      Realm

      Returns the realm that contains this security provider. Returns null if this security provider is not contained by a realm.

             
      Privileges Read only
      TypeRealmMBean
      Relationship type: Reference.

      Attributes

      This section describes the following attributes:

      ActiveTypes

      The token types that are currently active.

             
      Privileges Read/Write
      Typeclass java.lang.String[]
      Default Value oidc_token

      Base64DecodingRequired

      Returns whether the tokens that are passed to the Identity Assertion provider will be base64 decoded first. If false then the server will not base64 decode the token before passing it to the identity asserter. This defaults to true for backwards compatibility but most providers will probably want to set this to false.

             
      Privileges Read/Write
      Typeboolean
      Default Valuetrue

      ClockSkew

      The allowable variance, in seconds, for the token Expiration, Issued At, and Not Before attributes.

             
      Privileges Read/Write
      Typeint
      Default Value120

      Description

      A short description of the WebLogic OpenID Connect Identity Assertion provider.

             
      Privileges Read only
      Typejava.lang.String
      Default ValueWebLogic OpenID Connect Identity Assertion provider
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      IdentityDomain

      Returns the name of the identity domain.

             
      Privileges Read/Write
      Typejava.lang.String

      KeyCacheSize

      Specifies the maximum number of entries to OIDC JWKS cache.

             
      Privileges Read/Write
      Typejava.lang.Integer
      Default Value10
      Minimum value2

      KeyCacheTTL

      The time-to-live (TTL) of the OIDC JWKS cache, in seconds.

             
      Privileges Read/Write
      Typejava.lang.Integer
      Default Value300
      Minimum value120

      Name

             
      Privileges Read only
      Typejava.lang.String
      Default ValueOIDCIdentityAsserter
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      ProviderClassName

      The name of the Java class used to load the WebLogic OpenID Connect Identity Assertion provider.

             
      Privileges Read only
      Typejava.lang.String
      Default Valueweblogic.security.providers.authentication.OIDCIdentityAsserterProviderImpl
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      RequestCacheSize

      Specifies the maximum number of entries to OIDC request holder cache.

             
      Privileges Read/Write
      Typejava.lang.Integer
      Default Value500
      Minimum value100

      RequestCacheTTL

      The time-to-live (TTL) of the OIDC request holder cache, in seconds.

             
      Privileges Read/Write
      Typejava.lang.Integer
      Default Value300
      Minimum value120

      SupportedTypes

      The types of tokens supported by the OpenID Connect provider.

             
      Privileges Read only
      Typeclass java.lang.String[]
      Default Value oidc_token
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      UserIDTokenClaim

      Claim ID used to extract the user ID (GUID) from the token.

             
      Privileges Read/Write
      Typejava.lang.String
      Default Valuesub

      UserNameTokenClaim

      Claim ID used to extract the user name from the token.

             
      Privileges Read/Write
      Typejava.lang.String
      Default Valueupn

      Version

      The version number of the WebLogic OpenID Connect Identity Assertion provider.

             
      Privileges Read only
      Typejava.lang.String
      Default Value1.0
      Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

      VirtualUserAllowed

      Determines whether to allow identity assertion to authenticate WebLogic Server users who are not represented in the security store.

             
      Privileges Read/Write
      Typeboolean
      Default Valuetrue

      Operations

      This section describes the following operations:

      isSet

      Returns true if the specified attribute has been set explicitly in this MBean instance.

         
      Operation Name"isSet"
      ParametersObject [] {  propertyName }

      where:

      • propertyName is an object of type java.lang.String that specifies:

        property to check
      SignatureString [] { "java.lang.String" }
      Returns boolean
      Exceptions
      • java.lang.IllegalArgumentException

      unSet

      Restore the given property to its default value.

         
      Operation Name"unSet"
      ParametersObject [] {  propertyName }

      where:

      • propertyName is an object of type java.lang.String that specifies:

        property to restore
      SignatureString [] { "java.lang.String" }
      Returns void
      Exceptions
      • java.lang.IllegalArgumentException
        UnsupportedOperationException if called on a runtime implementation.

      wls_getDisplayName

         
      Operation Name"wls_getDisplayName"
      Parametersnull
      Signaturenull
      ReturnsString