OpenID Connect Discovery

There are some optional discovery parameters which are required to be present for FAPI conformance.

These information can be added to the metadata.json under Federation or AAC > Template Files > in order for the endpoint to be updated accordingly. The following modifications must be made:

• Add "tls_client_certificate_bound_access_tokens" to

  <%var supported = true;templateContext.response.body.write(supported);%>

Updating "claims_supported" to

["realmName","preferred_username","given_name","uid","upn","groupIds","employee_id","name","tenantId",
"mobile_number","department","job_title","family_name","email","acr"]

Parent topic: Achieving Financial-grade API (FAPI) conformance with IBM Security Verify Access