Geek Answers Handbook

Using OpenID Connect with WSO2 API Manager and ADFS

I am testing the WSO2 API Manager v1.9.0 for its possible use in my company, we are creating some new applications using the Rest API for the backend and SPA for our interfaces. We concluded that this would require the use of OpenID Connect and WSO2.

We use ADFS 3.0 as our identity provider, and I have already managed to combine ADFS with the WSO2 API Manager, and I can authenticate company users to obtain an access token. The process goes through the following steps:

  • The user clicks the login link and redirects it to the ADFS login page;
  • The user is authenticated and redirected to the consent page;
  • The user approves the access, and he is redirected to the link containing the access token.

Given that my company already owns user data, is there a way to turn off the consent page and only require user authorization?

The OpenID Connect specification is new to me, so if you need more information, let me know.

Regards

+4
source share
1 answer

I will learn how to disable the consent page. Edit [WSO_API_MANAGER] /repository/conf/identity.xml and change the SkipUserConsent parameter to true.

<OpenIDConnect>
    ...
    <SkipUserConsent>true</SkipUserConsent>
    ...
</OpenIDConnect>
+6
source

More articles:


All Articles