FAPI Definition Configurations

Edit online

This topic describes the FAPI definitions configurations.

Definition Configuration- Minimum Entropy 128bit
As part of FAPI requirement, access_tokens should be a minimum of 128 bit. To configure this set access_token length to '32' in OpenID Definition.
Definition Configuration- Use EC256 or PS256 Signing keys
As part of FAPI requirement, ES256 signing keys are required to be used for id_token signing.
Advance Configuration- OAuth20.State.Required
FAPI conformance requires authorization requests without state to be allowed. To achieve this, set the advance configuration parameter OAuth20.State.Required to false. The configuration overwrites IBM® Verify Identity Access default behavior making state a non-mandatory parameter.
Note: This can only be achieved on IBM Verify Identity Access version 10.0.0