[NIFI-9413] Add tls_mutual_auth along with other authentication methods for nifi OIDC

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Security
• Environment: All
• Flags: Important
• Assignee: Unassigned
• Reporter: Lorenc
• Created: 24/Nov/21 01:25
• Updated: 28/Mar/23 13:53

Description

Currently Nifi only supports client secret authentication method for OIDC.

For many organization this is not an approved or recommended method of authenticating cia OIDC.

Requesting to add additional functionality in nifi OIDC authentication method to provide support for the follwing oidc methods of client requests:

tls_mutual_auth

self_signed_tls_client_auth

private_key_jwt

 

Refer to this site for more info: https://darutk.medium.com/oauth-2-0-client-authentication-4b5f929305d4

 

 

 

 

Issue Links

• relates to: NIFI-8413 Oidc Identity Provider should support assertions as client credentials for authenticating against the token endpoint