Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
{
	"claims":
    {
      "login_hint": "8422263",
      "scope": "openid profile signature RELATEDPARTY:clientname",
      "acr_values": "sim-sign",
      "iss": "clientid",
      "aud": "https://idp.audkenni.is/oauth2/realms/root/realms/audkenni",
      "exp": 238932499002,
      "binding_message": "binding display message",
      "binding_content": "binding content"
      "nexus_url": "https://ms.audkenni.is/plugout-server-4.25.4/api/v1/1d29c733-cb05-4b82-a4f1-40acccf72284"
    },
    "key":"{{private_key}}",
    "alg":"RS256"
}

Next to the scope the following parameters can be modified:

Parameter

Description

login_hint

In case the sim solution is used to sign the message this MUST contain the mobile number of the user

scope

In case of a proxy scenario this should contain the name of the initial requesting party

acr_values

This determines the method that is going to be used to sign the message. Valid values are sim_sign and nexus_sign

binding_message

This is the message that the user will see when receiving the sign request

binding_content

This is the actual content that will be signed

nexus_url

This parameter is required for the when nexus_sign is used as acr_values nexus_sign. It contains the url of the nexus personal connection that is setup with the enduser. A example html page that will generate that script can be downloaded

View file
namegetNexusUrl.html

...