Support for OAuth and OpenID Connect has been part of Airlock IAM since 2014. The OAuth and OIDC plugins of Airlock IAM are constantly being developed and functionally enhanced for the latest use cases and protocol updates.
Supported features
The following table shows which features of the OAuth 2.0/OIDC standards Airlock IAM implements and where:
Features | OAuth 2.0 Authorization Server (AS) | OAuth 2.0 Client | |
|---|---|---|---|
OAuth 2.0 | OAuth 2.0 Authorization Code Grant* | .theme/1.3/en-us.4453.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.4454.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
OAuth 2.0 Client Credentials Grant* | .theme/1.3/en-us.4455.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OAuth 2.0 Token Exchange Grant* | .theme/1.3/en-us.4456.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OAuth 2.0 Implicit Grant | |||
OAuth 2.0 Token Introspection | .theme/1.3/en-us.4457.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OAuth 2.0 Token Revocation | .theme/1.3/en-us.4458.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OAuth 2.0 Dynamic Client Registration | .theme/1.3/en-us.4459.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OAuth 2.0 Authorization Server Metadata Endpoint | .theme/1.3/en-us.4460.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.4461.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
OIDC | OpenID Connect Authorization Code Flow* | .theme/1.3/en-us.4462.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.4463.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
OpenID Connect Implicit Flow | |||
OpenID Connect Token Introspection | .theme/1.3/en-us.4464.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OpenID Connect Token Revocation | .theme/1.3/en-us.4465.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OpenID Connect Discovery | .theme/1.3/en-us.4466.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.4467.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
OAuth 2.0 Dynamic Client Registration | .theme/1.3/en-us.4468.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OpenID Connection Session Management | .theme/1.3/en-us.4469.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
OpenID Connect UserInfo Endpoint | .theme/1.3/en-us.4470.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.4471.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
OpenID Connect RP-initiated logout (as RP) | .theme/1.3/en-us.4472.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
Account Linking | .theme/1.3/en-us.4473.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
Automated Account Registration (Social Registration) | .theme/1.3/en-us.4474.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
| * | Implemented grant type. |