Authorization server security provider in Jitterbit App Builder

The Authorization Server security provider allows App Builder to operate as both an OAuth 2.0 and OpenID Connect (OIDC) authorization server. OIDC clients can use the Authorization Server to authenticate users. Access tokens issued by the Authorization Server can be used to access App Builder-hosted REST, Webhook and App Builder Connector APIs.

Configuration

App Builder ships with an Authorization Server security provider. The security provider is disabled by default. To enable the Authorization Server, start by signing into App Builder as an administrator:

1. Click the IDE link.
2. Click the Security Providers button.
3. In the User Authentication panel, locate the Authorization Server and click the Details icon (Chevron).
4. Click the Edit button.
5. Check the Enabled option.
6. Click the Save button.

To use the authorization server to authenticate users and access protected resources, you will need to register one or more client applications. See the Client authentication document for detailed instructions on how to register client applications.

Certificates

The Authorization Server security provider requires two certificates, one for encryption and one for signing. These certificates are automatically generated when App Builder first starts. No additional configuration is required.

Properties

The Authorization Server supports the following additional parameters. Default values are supplied for both parameters. No additional configuration is required.