The authConfig section specifies the options for configuration for validating Titan authentication.
Options
| Attributes | Description |
|---|---|
| issuer | Specifies the full URL to the Hyland IDP instance. |
| clientID | Specifies the clientId defined when configuring IDP. |
| scope | Specifies the list of scopes to request when connecting to the Identity Provider. |
| redirectUri | Specifies the URI to redirect to after authenticating with IDP. |
| logoutUrl | Specifies the logoutUrl (the end-session URL) used by the identity provider to clear its session. The browser is redirected to this URL, so the IDP can perform its logout logic; after which the IDP typically redirects the browser to postLogoutRedirectUri, returning the user to the application. |
| postLogoutRedirectUri | Specifies the logout URI to redirect users to after logging out of Titan. |
| requireHttps | Specifies whether you want Titan to require https level authentication. |
| strictDiscoveryDocumentValidation | Specifies whether all endpoints provided by the ID Provider discovery document share the same base URL as the issuer parameter. |
Example
""authConfig": {
"issuer": "https://<idp-host>/identityprovider",
"clientId": "titan-app",
"scope": "openid profile profile.onbase",
"redirectUri": "https://<app-host>/view/authentication-confirmation",
"logoutUrl": "https://<idp-host>/connect/endsession",
"postLogoutRedirectUri": "https://<app-host>/home",
"requireHttps": true,
"strictDiscoveryDocumentValidation": false
},