Jump to content

NetScaler OIDC/OAuth2 multiple Redirect URIs for one client_id


Go to solution Solved by Kari Ruissalo,

Recommended Posts

I'm using NetScaler AAA as an OIDC IdP for a web application and have configured the OAuthIdPProfile as follows:

> sh oauthidPProfile oauth-idp_prof_server.domain.com
1)      Name: oauth-idp_prof_server.domain.com
        Client ID: client_id
        Client Secret: client_secret
        Redirect URI: https://server.domain.com/appurl/Login
        Issuer name: https://server.domain.com
        Config Service:
        Audience: app-name-scope
        Skew Time: 5
        Default Authentication Group:
        Relying Party Metadata URL:
        Relying Party Metadata Refresh Interval: 50
        Encrypt Token: OFF
        Signature service:
        Signature Method: RS256
        OAuth IDP Status: INIT
        Custom Attributes:
        Send Password: OFF

I can have one Redirect URI in the profile (at least on 13.1-51.15), but what if I needed to support multiple redirect URIs? I configured another OAuthIdPProfile and Policy like this and bound it to the AAA vServer:

> sh oauthidPProfile oauth-idp_prof_server.domain.com-secondary
1)      Name: oauth-idp_prof_server.domain.com-secondary
        Client ID: client_id
        Client Secret: client_secret
        Redirect URI: https://server.domain.com/appurl/additional/Login
        Issuer name: https://server.domain.com
        Config Service:
        Audience: app-name-scope
        Skew Time: 5
        Default Authentication Group:
        Relying Party Metadata URL:
        Relying Party Metadata Refresh Interval: 50
        Encrypt Token: OFF
        Signature service:
        Signature Method: RS256
        OAuth IDP Status: INIT
        Custom Attributes:
        Send Password: OFF

Is this the way to do it or sth else? If someone already has tried this? I'm trying this setup next Monday 😁

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...