user oauth-user server

FortiWeb supports front-end authentication with third party authentication servers such as Google and Facebook.

Use this command to add the third party authentication server information.

To use this command, your administrator account’s access control profile must have either w or rw permission to the authusergrp area. For details, see Permissions.

Syntax

config user oauth-user request

edit

set <oauth_request_name>

set mode {client | resource-server | both}

set scope <string>

set client-id <string>

set client-secret <passwd>

set redirect-endpoint <string>

set authz-req <datasource>

set token-req <datasource>

set validate-req <datasource>

set validate-frequency {session | transaction | interval}

set validate-interval <integer>

set userinfo-req <datasource>

next

end

Variable	Description	Default
<oauth_request_name>	Enter a name for the request.	No default
mode {client | resource-server | both}	Select whether FortiWeb works as an authorization client or a resource server, or both.	No default
scope <string>	Enter the scope field for OAuth.	No default
client-id <string>	A client credential. Assigned by authorization server.	urlencoded
client-secret <passwd>	A client credential. Assigned by authorization server.	No default
redirect-endpoint <string>	Redirection URL back to FortiWeb.	disable
authz-req <datasource>	The authorization request created in the OAuth Request tab.	No default
token-req <datasource>	The token request created in the OAuth Request tab.	No default
refresh-req <datasource>	The refresh request created in the OAuth Request tab.	No default
validate-req <datasource>	The valid request created in the OAuth Request tab.	No default
validate-frequency {session | transaction | interval}	Whether to validate the request per session, transaction, or every several second.	No default
validate-interval <integer>	If the validate-frequency is interval, then enter the interval time.
userinfo-req <datasource>	The user info request created in the OAuth Request tab.	No default

Related topics

• user oauth-user request