OA4MP (OAuth for Many People)

Welcome to OAuth for Many People Server. This page servers as an index to several often detailed introductions to various topics that are useful for OA4MP.

First steps

Getting Started

OA4MP version change log

Frequently asked questions.

Sample of how to install both a client and server locally

Configuring the server

Configuration File Use and Syntax

Configuration File Reference Manual

The discovery endpoint for the service.

Configuring Server Side Email Notifications

Server scripting hooks

Inheritance of clients

Information about a user and their tokens, given a single valid token to identify them

Using self-signed certs for the client and server

Everything you wanted to know about token lifetimes.

Monitoring last accessed times.

Removing unused store objects

Virtual issuers

Authenication

Overview of authentication in OA4MP. Start here if you have questions.

Using HTTP headers for authentication

Using a proxy for authentication

Extending OA4MP via Java.

Using your own, standalone authentication service with OA4MP

Using OA4MP as a dedicated token issuer.

Administration

Command line tools for managing storage.

Testing OA4MP using the command line client.

Testing OA4MP OIDC using curl calls.

Setting up monitoring for an OA4MP server.

Migrating a FileStore to an SQL store.

Extending the server

QDL scripting on OA4MP servers.

Extended attributes for the policies.

Deprecated features

These are still available, but will probably be removed soon. If you are using them, consider other options. As time goes on, this list gradually shortens as they are removed.

Writing a Java extension for a custom scopes handler (deprecated).

Client management

Administrative Clients

Dynamic client registration

Ersatz clients in general

Quickstart on how to fork a flow with an ersatz client.

Service clients

Manually approving clients deprecated. Use command line tools instead

Reference materials

How to write the policy document.

About scopes.

About issuers.

About signing OIDC requests and generating keys for the server.

OA4MP Server Javadocs