OAuth and OIDC templates - PingCentral - 2.0

PingCentral for IAM Administrators
bundle
pingcentral-20
ft:publication_title
PingCentral for IAM Administrators
Product_Version_ce
PingCentral 2.0 (Latest)
category
Administrator
Audience
Product
pc-20
pingcentral
ContentType_ce

Add, update, or delete OAuth and OpenID Connect (OIDC) templates to meet your needs, or revert them to previous versions, as necessary.

To add an OAuth or OIDC template, select a client configuration to replicate. retrieves this configuration and saves it as a template, which serves as a building block for future applications.

Adding OAuth and OIDC templates

  1. All templates are listed on the Templates page. To add a new template, click Add Template.
  2. On the Integration Type page, select either an OAuth or OpenID Connect template. Click Next.
  3. On the Select OAuth Client or OIDC Client page, select the environment that hosts the client application you want to use as a template, and then select the application itself from the Client list.
    Note:

    If an environment is offline or if a administrator has set the environment status to Disabled, you will be unable to select a disabled environment for template creation.

    You see details regarding the selected client.


    This example shows the information that displays when an OAuth client is selected.
  4. To see the JSON for the application, click Review Configuration.
  5. On the Name Template page, add a name and description for your template.

    This information will help application owners select the appropriate template.

  6. Select an icon to represent your template.

    The icon you choose is shown with the template name and description.

  7. Click Save and Close.

    You see the new template in the list of available application templates. Application owners will see the new template on the Select Template page.


    This example shows the Select Template screen, which lists the templates available for application owners to use.

    For OAuth or OIDC application templates, the following items are saved:

    • The client application
    • The ATM, if one exists
    • The parent ATM, if one exists
    • The OIDC policy, if one exists
    • Grant types
    • Definitions of exclusive scopes referenced by the client

Updating OAuth and OIDC templates

  1. To update an OAuth or OIDC template, click the Expand icon associated with the template.
  2. If the template is based on an outdated configuration, you can click the Sync button to sync the template with the latest configuration available.
    Note:

    When you upgrade to PingCentral 2.0, OAuth and OIDC templates created prior to version 2.0 cannot be synced with the most recent configuration available. Recreate the template in version 2.0 to use the sync feature going forward.

  3. Click the Pencil icon to make additional changes.

    All of the editable information is on one page.

    OptionDescription
    To update the name, description, or icon:

    Update the information in the Name and Description fields or select a new icon to represent the template.
    To update grant types:

    To update the grant types used for authorization, select or deselect the grant types that you want to use for this template.

    For details, see Grant Types in the PingFederate Server guide.

    Note:

    Some grant types might not be available with your version of .
    To update scopes:

    To add or update scopes, search for them and select or deselect the scopes that you want to use for this template.

    For details, see Scopes in the PingFederate Server guide.
    To update policy contracts:

    Add, delete, or update the current attribute mappings in the policy contract associated with this template.

    For details, see Attribute contracts in the PingFederate Server guide.

    Important:

    If you update a policy contract, a new contract is created in , and you will be prompted to name it.

    Note: If a template is associated with an environment that is deleted, you will not be able to update OIDC policy information for the template.
  4. Click Save.

    If you updated the grant types, scopes, or policy contract information, the Save Template window displays and reminds you that you are creating a new version of this template. Applications created from the previous template will not change until you update the application to the latest template version. Briefly describe the updates you made to the template in the Comments field for tracking purposes and click Save.

Reverting templates to previous versions

The history of each template is available to review and compare with previous versions. You can see which administrator modified the template configuration or policy contract, when it was modified, and details regarding these modifications. You can revert templates to previous versions if necessary.

  1. To review the template history, click the Expand icon associated with the template, and then click the History tab.
  2. Click the Details link associated with each template version to see its configuration.
  3. Click the Diff with Current Version toggle to see the differences between this version and the most recent version.
  4. To restore this version as the current version, click Restore This Version.
    A new version of the template is created that matches the configuration of the version that you want to restore.
    Attention: The template revision numbers increment on a system-wide level, not on a per-template basis. So the first time any template in PingCentral is changed, it will have a revision of 1. A change made to a completely different template results in a revision of 6, and so forth. Reverting a template generates another revision, which again increments on a system-wide basis.