Client Credentials grant setup

To configure the Client Credentials grant to be used with PSD2, proceed as follows:

  1. Go to:
    Loginapp >> OAuth 2.0/OIDC Authorization Servers >> <some AS> >> OAuth 2.0 Grants/OIDC Flows
  2. In property OAuth 2.0 Client Credentials Grant, create and edit an OAuth 2.0 Client Credentials Grant plugin, as follows:
  3. Configure the Issuer and Audience properties to add iss and aud claims, if they are required by the backend services.
  4. Use the following plugins in the list of Granted Scope Processors:
    1. Plugin OAuth 2.0 Granted Scope Whitelist, with allowed scopes: pisp (all other scopes are used with the Authorization Code flow).
    2. Plugin STET PSD2 OAuth 2.0 Scope Filter (no detail configuration required).
  6. As Signature, use the plugin JWT Access Token Private Key Signature. 

Further information and links