PingFederate Server

Customizing the OpenID Provider configuration endpoint response

The OpenID Provider (OP) configuration endpoint at /.well-known/openid-configuration provides configuration information for the OAuth clients to interface with PingFederate using the OpenID Connect (OIDC) protocol.

About this task

As needed, you can customize the amount of configuration information by modifying a template file. You can also add conditional statements to return different responses, based on information from the requests to suit multiple use cases simultaneously.

Steps

  1. Edit the openid-configuration.template.json file, located in the <pf_install>/pingfederate/server/default/conf/template directory, to specify the desired information to be returned by the OP configuration endpoint.

    Multiple samples are provided, including sample statements using the $HttpServletRequest and $HttpServletResponse objects to get and set values.

  2. Save your changes.

    Template customization does not require a restart of PingFederate. For a clustered PingFederate environment, repeat these steps on each node.