user oauth-user server
FortiWeb supports front-end authentication with third party authentication servers such as Google and Facebook.
Use this command to add the third party authentication server information.
To use this command, your administrator account’s access control profile must have either w or rw permission to the authusergrp area. For details, see Permissions.
Syntax
config user oauth-user server
edit <server_name>
set mode {client | resource-server | both}
set scope <string>
set oidc {enable | disable}
set client-id <string>
set client-secret <passwd>
set redirect-endpoint <string>
set authz-req <datasource>
set token-req <datasource>
set validate-req <datasource>
set validate-frequency {session | transaction | interval}
set validate-interval <integer>
set userinfo-req <datasource>
set jwks-req <datasource>
next
end
| mode {client | resource-server | both} |
Select whether FortiWeb works as an authorization client or a resource server, or both. |
No default |
| scope <string> |
Enter the scope field for OAuth. |
No default |
|
oidc {enable | disable}
|
Enable to use OIDC authentication.
|
disable
|
| client-id <string> |
A client credential. Assigned by authorization server. |
urlencoded |
| client-secret <passwd> |
A client credential. Assigned by authorization server. |
No default |
| redirect-endpoint <string> |
Redirection URL back to FortiWeb. |
disable
|
| authz-req <datasource> |
The authorization request created in config user oauth-user request. |
No default
|
| token-req <datasource> |
The token request created in config user oauth-user request. |
No default
|
| refresh-req <datasource> |
The refresh request created in config user oauth-user request.
|
No default
|
| validate-req <datasource> |
The valid request created in config user oauth-user request.
|
No default
|
| validate-frequency {session | transaction | interval} |
Whether to validate the request per session, transaction, or every several second. |
No default
|
|
validate-interval <integer>
|
If the validate-frequency is interval, then enter the interval time.
|
No default
|
|
userinfo-req <datasource>
|
The user info request created in config user oauth-user request.
|
No default
|
|
jwks-req <datasource>
|
The JWKS request created in config user oauth-user request.
Available only if oidc is enabled.
|
No default
|
Related topics
