5.10.4.4. Resolve tenants with a token issuer claim
OIDC tenants which support Bearer token authentication can be resolved using the access token’s issuer. The following conditions must be met for the issuer-based resolution to work:
-
The access token must be in the JWT format and contain an issuer (
iss) token claim. -
Only OIDC tenants with the application type
serviceorhybridare considered. These tenants must have a token issuer discovered or configured.
The issuer-based resolution is enabled with the quarkus.oidc.resolve-tenants-with-issuer property. For example:
quarkus.oidc.resolve-tenants-with-issuer=true
quarkus.oidc.tenant-a.auth-server-url=${tenant-a-oidc-provider}
quarkus.oidc.tenant-a.client-id=${tenant-a-client-id}
quarkus.oidc.tenant-a.credentials.secret=${tenant-a-client-secret}
quarkus.oidc.tenant-b.auth-server-url=${tenant-b-oidc-provider}
quarkus.oidc.tenant-b.discover-enabled=false
quarkus.oidc.tenant-b.token.issuer=${tenant-b-oidc-provider}/issuer
quarkus.oidc.tenant-b.jwks-path=/jwks
quarkus.oidc.tenant-b.token-path=/tokens
quarkus.oidc.tenant-b.client-id=${tenant-b-client-id}
quarkus.oidc.tenant-b.credentials.secret=${tenant-b-client-secret}