ExternalFlow

Introduction

The ExternalFlow authenticator redirects the user to an external service. Data is transmitted using signed JWT's to and from the service in a POST request.

Configuration

Authenticator type: ExternalFlow

Common Authenticator configuration can be found here.

Properties

Name	Description	Default	Mandatory
location	Location to the external service	N/A
key_store	Keystore used to sign the outgoing JWT	N/A
trust_store	Truststore used to verify the incoming JWT data	N/A
attributes	Object containing data that is sent as payload to the external service.	{}

Example

{
    "id": "externalflow01",
    "type": "ExternalFlow",
    "config": {
        "base_path": "/login",
        "location": "https://externalservice.com/",
        "attributes":
        {
            "attribute_username":"${state.username}",
            "attribute_info":"This is another attribute"
        },
        "key_store":
         {
           "type" : "PKCS12",
           "path" : "path/to/my.p12",
           "password" : "password",
           "private_key_password": "password"
         },
         "trust_store":
         {
           "type" : "PKCS12",
           "path" : "path/to/your.p12",
           "password" : "password"
         }
    }
}