Skip to content

Commit ef64895

Browse files
Merge pull request #10195 from mendix/kv-oidc-private_key_jwt
OIDC SSO: `private_key_jwt` info update
2 parents 4e2c4c7 + 8346ec0 commit ef64895

File tree

1 file changed

+2
-0
lines changed
  • content/en/docs/marketplace/platform-supported-content/modules

1 file changed

+2
-0
lines changed

content/en/docs/marketplace/platform-supported-content/modules/oidc.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -337,6 +337,8 @@ In this case, the OIDC client is the app you are making.
337337
* `private_key_jwt`: This method, introduced in version 4.1.0, uses asymmetric key cryptography (algorithm) for authentication. This is the best option for security. When you select the `private key` option, you can configure the following fields:
338338
* **Key Pair Expiration Days**: (default `90`)
339339
* **JWT ALG(Signing Algorithm)**: (default `RS256`)
340+
341+
{{% alert color="info" %}}`private_key_jwt` is not yet supported with Entra ID due to the specific way of Microsoft's implementation, which requires enhancements to the OIDC SSO module.{{% /alert %}}
340342

341343
Once you **Save** the configuration, a key pair is automatically generated. Before you set up the private key authentication in your Mendix App, complete the JWKS configuration at your IdP. Check the documentation of your IdP for details. If you are using Okta, you can refer to the [Configuring JWKS at Your IdP (Okta)](#jwks-okta) section.
342344

0 commit comments

Comments
 (0)