You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@nifi.apache.org by Vijay Jammi <vj...@gmail.com> on 2021/04/09 16:41:45 UTC

NIFI-8413 - Oidc Identity Provider should support assertions as client credentials for authenticating against the token endpoint

Hello there,

We have created the NIFI-8413
<https://issues.apache.org/jira/browse/NIFI-8413> to extend the current
functionality of Standard Oidc Identity Provider to support assertions as
client credentials for authenticating against the token endpoint.

Earlier this year, we started discussing this requirement over slack and
over the dev mailing list with M Tien and Bryan. Thanks for the guidance
that was provided, we have proved out this solution internally within our
organization on Nifi's codebase v1.11.4 and Keycloak Authorization Server
and are in process of proving this out with Microsoft ADFS also. Meantime,
we would like to see if there is an interest in the community to have this
new feature contributed back.

Can someone please take a look at the proposed changes and provide
feedback.

Vijay Jammi

Re: NIFI-8413 - Oidc Identity Provider should support assertions as client credentials for authenticating against the token endpoint

Posted by "vjammi.apache@gmail.com" <vj...@gmail.com>.

Can someone please take a look at NIFI-8413 and provide their feedback. We wanted to see if we there is an interest in having this feature added to  one of the upcoming releases. 

Thank you in advance.

Vijay Jammi

> 
> Vijay Jammi

Sent from my iPhone

> On Apr 9, 2021, at 12:41 PM, Vijay Jammi <vj...@gmail.com> wrote:
> 
> 
> Hello there,
> 
> We have created the NIFI-8413 to extend the current functionality of Standard Oidc Identity Provider to support assertions as client credentials for authenticating against the token endpoint. 
> 
> Earlier this year, we started discussing this requirement over slack and over the dev mailing list with M Tien and Bryan. Thanks for the guidance that was provided, we have proved out this solution internally within our organization on Nifi's codebase v1.11.4 and Keycloak Authorization Server and are in process of proving this out with Microsoft ADFS also. Meantime, we would like to see if there is an interest in the community to have this new feature contributed back.
> 
> Can someone please take a look at the proposed changes and provide feedback.  
> 
> Vijay Jammi
> 
> 
>