Configuration

The basic settings for the server extension are specified in the General tab.

Default groups

• Specifies which user groups are added as default to each user from the OAuth.

Group assignment

• Converts claim data to user groups. If a user on the OAuth server contains certain claims, these can be evaluated and assigned to a user group from the TwinCAT HMI accordingly.

Validation OAuth 2.0 in the server (TcHmiSrv / Security / OAuth 2.0 authorization configurations)

Use by default for OAuth 2.0 authorization

• Use the login page of the OAuth server instead of the TwinCAT HMI login page.

Authentication extension domain

• Links the set OAuth certification with a server extension. The server extension can then perform functions such as automatic mapping of users.

OAuth 2.0 authorization endpoint (v2)

• Specifies the authorization endpoint of the OAuth server.

OAuth 2.0 Token Endpoint (v2)

• Specifies the Token Endpoint of the OAuth server.

JSON Web Key Set Endpoint (v2)

• Specifies the Web Key Set Endpoint of the OAuth server.

Application or client ID

• Client configuration of the OAuth server.

Secret client key

• Client key of the OAuth server.

Response type

• Specifies the type in which the response is received.

Scope

• Describes the scope being used.
  "microprofile-jwt" is required for the TwinCAT HMI with OAuth 2.0.

Domain hint

• Skips the check process via the e-mail address when activated.

Request

• Specifies the type of request.