Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

tia® Connect to tia®Core CMIS

There are two options

  • Authentication via client_secret

  • Authentication via certificate

For client_secret authentication, only a client ID and a client secret need to be configured.

For certificate authentication, a keystore containing the key pair must be provided. A certificate must be generated from this and imported into the app registration.
The client-authentication-method tls_client_auth or self_signed_tls_client_auth needs to get configured. The name of the configured SSL bundle needs to get configured into the tia.security.oidc.sslBundleName property.

How exactly this is configured is described as follows

Parent

Parameter

Description

Required

spring.security.oauth2.client.provider.azure

issuer-uri

Issuer URI of the authorization server

yes

spring.security.oauth2.client.provider.azure

user-name-attribute

The name of the attribute in the token that references the Name or Identifier of the end-user

no

spring.security.oauth2.client.registration.cmisauth

provider

Name of the configured provider

yes

spring.security.oauth2.client.registration.cmisauth

client-id

The client identifier

yes

spring.security.oauth2.client.registration.cmisauth

client-secret

The client secret

yes

spring.security.oauth2.client.registration.cmisauth

authorization-grant-type

A credential representing the resource owner's authorization used by the client to obtain an access token

yes

spring.security.oauth2.client.registration.cmisauth

scope

The scope(s) requested by the client during the authorization request

yes

spring.security.oauth2.client.registration.cmisauth

client-authentication-method

The authentication method used when authenticating the client with the authorization server.

Only needs to get overwritten with tls_client_auth or self_signed_tls_client_auth if the client_redentials flow should authenticate with a certificate

no

spring.ssl.bundle.jks.selfsignedcertificate.key

alias

Key alias

no

spring.ssl.bundle.jks.selfsignedcertificate.key

password

Key password

no

spring.ssl.bundle.jks.selfsignedcertificate.keystore

location

Path to the keystore

no

spring.ssl.bundle.jks.selfsignedcertificate.keystore

password

Keystore password

no

spring.ssl.bundle.jks.selfsignedcertificate.keystore

type

Type of the keystore, e.g. PKCS12

no

...