Introduction

...

client_id	Contained in file generated when Activate is pressed
secret	Contained in file generated when Activate is pressed
`https://sso.example.com/uas/oauth2/metadata.json`	This publically available URL returns all of the required OAuth2 endpoints in JSON format.

Compatibility flags

The following compatibility flags are supported for OAuth 2.0 applications.

StrictAudiencePolicy

8.4.1

Specific application or system-wide

Controls JWT aud claim construction and validation policy.

If set, the aud claim is required to match the invoked endpoint.

If not set, the aud claim must match either the issuer, the invoked endpoint or the token endpoint.

ExtendedOAuth2AuditLogging

8.5.0

Specific application

Enables additional audit logging for OAuth 2.0 applications. Additional audit logging for OAuth 2.0

DisableOAuth2CredentialsUrlDecoding

9.5.0

Specific application

Disable new default requirement of urlencoded credentials used in Basic Authorization header

...