Page Comparison

...

OpenID Connect CIBA (Client Initiated Backchannel Authentication) is a protocol specified in openid-client-initiated-backchannel-authentication-core-03 and is used for communication between Ubisecure SSO and an OpenID an OpenID Provider (OP).

Ubisecure SSO has two authentication methods which conform to the CIBA specification, SPI OpenID Connect CIBA and Unregistered and Unregistered OpenID Connect CIBA, and can be used to integrate a qualified  backchannel authentication service. The differences between the two methods are listed below.

...

The picture below shows the authentication sequence, in which the authentication starts from a user agent, which sends an authentication request to SSO, which then initiates the authentication with the OpenID the OpenID Provider (OP) handling backchannel authentication request.

...

For installation, you need to get the following from the OpenID provider Provider (OP):

• OP Metadata
  
  • Standard URL path is /.well-known/openid-configuration, for example https://ap.example.com:8443/ciba/.well-known/openid-configuration
• OP JWKS
  
  • URL for this is advertised in jwks_uri claim in the Provider OP Metadata.
• Client Identifier - client_id

...

1. Insert client_id in the Client Identifier field.
2. Press the Update button.
3. Upload the OpenID provider OP Metadata.
   
   1. Press the Upload button next to label "Provider Metadata:".
   2. Paste the OP Metadata JSON string in the field or upload the file containing it.
   3. Press OK.
4. Upload the OpenID provider the OP JWKS.
   
   1. Press the Upload button next to label "Provider JWKS:".
   2. Paste the OPr OP JWKS string in the field or upload the file containing it.
   3. Press OK.

Under the Main tab:

1. Tick Enabled.
2. Press the Update button.

Configuration

These configuration options are available to be added to "Configuration String" in method settings.

...