OIDC-OAuth

[daniew01]

I am busy configuring a complete project which will make use of OpenIDConnect-Oauth based on the OpenBanking Standard and wanted wanted to make used of execute_isamcfg role but I understand this has been depricated.

Are there any suggestions which role is replacing this? How do i know if there are any roles replacing older roles? Can anyone suggest the best roles to use to achive this config via ansible?

Regards

[ram-ibm]

I will add a new role to call the function - ibmsecurity.isam.web.reverse_proxy.oauth_configuration.config.

[ram-ibm]

New role pushed just now config_reverseproxy_oauth.

[daniew01]

Thanx

Will test it in the week to come

Kind Regards

[daniew01]

Hi Ram Just to confirm ... this role is similar as to when you select the "Oauth and OIDC Provider" under the Manage drop down?

If so my understanding is that the isamcfg command line configuration tools has run already and by selecting the above(running this new rle) the ACL / Object are created and configured for that reverse proxy junction.

What is the role(s) I would need to use to replace the isamcfg configuration tool ?

Kind Regards DJW

[ram-ibm]

isamcfg is the utility that creates /mga junction and sets up ACLs and WebSEAL config changes for you. There is a LMI option to execute that and you navigate to Secure Web Settings -> Reverse Proxy -> -> Manage -> OAuth and OpenID Connect Provider Configuration. This same option is available using the new role.

daniew01 commented 5 years ago

Hi How do I use this role against a different isam domain. Seems this role is catering only for Default domain ( as per Oauth and OpenID Connect option on the LMI)

ram-ibm commented 5 years ago

I am not following the question? oauth_configuration does not take any domain. If you want to run isamcfg - you can replace the "Default" in the playbook with a variable and override it as needed.

• © Githubissues.
• Githubissues is a development platform for aggregating issues.

[daniew01]

Hi How do I use this role against a different isam domain. Seems this role is catering only for Default domain ( as per Oauth and OpenID Connect option on the LMI)

[ram-ibm]

I am not following the question? oauth_configuration does not take any domain. If you want to run isamcfg - you can replace the "Default" in the playbook with a variable and override it as needed.