wso2 / product-is

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
727 stars 712 forks source link

Capability to Configure Custom KeyStores for All Inbound Authentication Protocols #20564

Open Binara-Sachin opened 2 weeks ago

Binara-Sachin commented 2 weeks ago

By default, the Primary or Tenant KeyStore is used for operations in the Authentication Flow such as Signing or Encrypting JWT-Tokens, SAML-Assertions, etc. Currently, a separate KeyStore can be configured for the SAML 2.0 flow for inbound authentication-related functionalities.

[keystore.saml]
file_name = ""
password = ""
type = ""
alias = ""
key_password = ""

For the rest of the protocols, (OAuth 2.0, WS-Federation, WS-Trust) WSO2 Identity Server does not have this capability.