Skip to content

Commit

Permalink
added jwks timeout configuration to IS
Browse files Browse the repository at this point in the history
  • Loading branch information
himeshsiriwardana committed Nov 21, 2024
1 parent 1d12103 commit 87edc87
Showing 1 changed file with 13 additions and 3 deletions.
16 changes: 13 additions & 3 deletions en/includes/guides/authentication/configure-token-exchange.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,10 +38,20 @@ To register a trusted token issuer:

4. Click **Next** and provide the mode of certificate configuration.

!!! note
You can either configure a JWKS endpoint or upload a certificate of the external party. This is required to validate the signature of the assertions sent by the external identity provider.

- **JWKS endpoint**: The JWKS endpoint of the trusted token issuer.

{% if product_name == "WSO2 Identity Server" %}

!!! note

For JWKS endpoints, the default read timeout is 1000 milliseconds. You may change this value by adding the following parameter to the `deployment.toml` file found in the `<IS_HOME>/conf/repository` directory.

```toml
[oauth.jwks_endpoint]
read_timeout = <value in milliseconds>
```
{% endif %}

- **Use PEM certificate**: Upload or paste the public certificate of the trusted token issuer. The certificate should be in PEM format.

??? note "If you have a certificate in other formats such as `.crt`, `.cer` or `.der`, expand here to see how you can convert them to PEM format using [OpenSSL](https://www.openssl.org/){:target="_blank"}"
Expand Down

0 comments on commit 87edc87

Please sign in to comment.