Details of the configuration of access to external APIs

From this list, you can create or edit an OAuth2 authentication configuration for an external connection to the CARL Source APIs.

External identifier*: Identifier of the connected external system.
Label*: Description of the connected external system.
Issuer*: Identifier of the issuer of the JWT token used to request an OAuth2 access token. This can be a URL.
Owner: CARL user who is used by the APIs when this external system connects.

One of the following 2 authentication methods must be filled in:

JWK keys URL: URL used to retrieve all JSON Web Keys (JWK) public keys used to verify the signatures of JWT tokens. Editable only if there is no generated shared key.
Shared secret key: Key that is generated via the Generate button. The key is hidden for security reasons.
- Generate: Used to generate or regenerate a shared secret key.
- Delete: Displayed when a shared secret key is present.

Access to the key is only possible at the time it is generated. An information message is displayed to prompt you to copy it so that it can be communicated to the administrators of the external system concerned by the configuration.

As part of a request for an OAuth2 access token, if the administrator of the external IS chooses to sign their JWT assertion token using the provided shared secret key, they will be responsible for decoding it beforehand, as it is encoded in Base64 URL format.