Enabling Authentication using JWT-MS

This section helps you to enable the authentication using JWT-MS.

JWT signature allows to verify that the token is signed by the sender and not altered in any way. The signature is created using the Header and Payload segments, a signing algorithm, and a secret or public key.

To enable JWT authorisation, you should set ms.security.tokencheck.enabled to Y.

XACML Configuration

The XACML files are available in the ms-arrangement-api.war\WEB-INF\lib\ms-arrangement-package-j2ee-201910.0.3.jar\xacml\ path.

Closedpdp-config.xml

In this file, you can configure the root policy and role based policy file locations.

Closedroot-policy.xml

In this file, you can configure the ID of the role based policy.

ClosedAMS-WC.xml

This file holds the actual authorization configuration.

ClosedJWT Token Payload

Below is the JWT token payload used in AMS,

{
"iss": "Publish",
"aud": " temenos.com",
"sub": "USER",
"exp": 1619170555,
"iat": 1587547106,
"roleId": [
"cba_LSM_getArrangementList"
]
}
NOTE: Algorithm used in generating JWT token is RS256.

Bookmark Name Actions
BACK

In this topic

Feedback
x

Are you sure you want to log-off?