Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Users connecting services to the eduTEAMS Service using OpenID Connect (OIDC) will need to choose which Grants they their services need. This page and the following table presents present guidance for the recommended and supported configurations.

...

Grantsoffline_accessClient authentication methodsPKCE
authorization_codefalseclient_secret_basic and client_secret_postfalse
authorization_codefalseclient_secret_basic and client_secret_posttrue
authorization_codefalsepublicfalse
authorization_codefalsepublictrue
authorization_code and refresh_tokentrueclient_secret_basic and client_secret_postfalse
authorization_code and refresh_tokentrueclient_secret_basic and client_secret_posttrue
authorization_code and refresh_tokentruepublictrue
authorization_code and token-exchangefalseclient_secret_basic and client_secret_postfalse
authorization_code and token-exchangefalseclient_secret_basic and client_secret_posttrue
authorization_code and token-exchangefalsepublictrue
authorization_code and refresh_token and token-exchangetrueclient_secret_basic and client_secret_postfalse
authorization_code and refresh_token and token-exchangetruepublictrue
device_codefalsepublicfalse
device_code and refresh_tokentruepublicfalse
implicitfalsepublicfalse