Configuration

In order to enable single sign-on, you will first need an OAuth client record within CXM.

The creation of this record is currently controlled by Jadu. You should contact Jadu with your request for an OAuth client and include the URL of your CXM instance and the following details:

Allowed redirect URIs

A list of URIs that should be permitted by CXM for the end-user to be redirected to with a token following successful authentication.

The URIs must use the https scheme, a fully qualified domain name and standard ports.

The URIs are used to validate arguments passed to the redirect_uri parameter in an OAuth request. These must match exactly with any location you intend the user to be redirected to.

An example URI might be https://myapp/oauth-handler.

Required grant types

Choose one or more of the following grant types:

• authorization_code
• refresh_token
• password

Name

A descriptive name for your application. This name is shown to the end user when they are asked to authorise your application to access their account.

Jadu will create the OAuth client and provide you with a client_id and client_secret.