OpenID Connect Discovery

There are some optional discovery parameters which are required to be present for FAPI conformance.

These information can be added to the metadata.json under Federation or AAC > Template Files > in order for the endpoint to be updated accordingly.

The following modifications must be made:
  • Adding "tls_client_certificate_bound_access_tokens" to
    <%var supported = true;templateContext.response.body.write(supported);%>
  • Updating "claims_supported" to
    ["realmName","preferred_username","given_name","uid","upn","groupIds","employee_id","name","tenantId",
    "mobile_number","department","job_title","family_name","email","acr"]