NiFi user authentication via OpenId Connect: token expiry issue

2019-08-21 Thread Kumara M S, Hemantha (Nokia - IN/Bangalore)
Hi , We have configured Nifi cluster and using OpenId Connect(keycloak) for user authentication. In Keycloak, here are some of configuration for token in realm settings * SSO Session Idle 30 Minutes * Access Token Lifespan 1 Minutes The issue is Nifi UI is g

Re: NiFi user authentication via OpenId Connect: token expiry issue

2019-08-21 Thread Matt Gilman
Hemantha, NiFi performs a token request. From that response, NiFi gets the ID token which is included from the 'openid' scope that is specified when we invoke the authorization endpoint. NiFi also requests the 'email' scope which NiFi will use as the user identity. We do obtain the expiration from