Security Provider - Authorization Server¶

The Authorization Server security provider allows Vinyl to operate as both an OAuth 2.0 and OpenID Connect (OIDC) authorization server. OIDC clients can use the Authorization Server to authenticate users. Access tokens issued by the Authorization Server can be used to access Vinyl-hosted REST, Webhook and Vinyl Connector APIs.

Configuration¶

Vinyl ships with an Authorization Server security provider. The security provider is disabled by default. To enable the Authorization Server, start by signing into Vinyl as an administrator:

1. Click the IDE link.
2. Click the Security Providers button.
3. In the User Authentication panel, locate the Authorization Server and click the Details icon (Chevron).
4. Click the Edit button.
5. Check the Enabled option.
6. Click the Save button.

In order to use the authorization server to authenticate users and access protected resources, you will need to register one or more client applications. See the Client Authentication document for detailed instructions on how to register client applications.

Certificates¶

The Authorization Server security provider requires two certificates, one for encryption and one for signing. These certificates are automatically generated when Vinyl first starts. No additional configuration is required.

Properties¶

The Authorization Server supports the following additional parameters. Default values are supplied for both parameters. No additional configuration is required.