helidon-io / helidon

Java libraries for writing microservices
https://helidon.io
Apache License 2.0
3.45k stars 563 forks source link

Helidon role mapper doesn't support multiple IDCS service cells (or OIDC configs) #8775

Open arnmohan opened 1 month ago

arnmohan commented 1 month ago

Environment Details


Problem Description

Problem - Helidon IDCS role mapper currently doesn’t support multiple IDCS service cells (or OIDC configs)

It has only one oidc config - URI, client id , secret is defined in configuration and roles are loaded.

     oidc-config:
            client-id: "client-id"
            client-secret: " "
            identity-uri: "IDCS identity server address"

For multi-tenant environment, this approach is not sufficient, as each tenant has a different URI for IDCS. This affects any MT deployment using IDCS cross tenancy.

romain-grecourt commented 1 month ago

@arnmohan please do NOT share internal links on GitHub.