Enabling Enterprise OAuth2/JWT authentication

Last Updated : Jun 04, 2025 |
Prolog information
Metadata
Keywords:
OAuth2 configuration is available through the configuration attributes within REST Client Services group and it does not have any dependency on any enterprise directory. This authentication mechanism can be offered in addition to Enterprise Basic and Enterprise IWA mechanisms, provided those mechanisms are enabled. It cannot be offered with Avaya Digest mechanism.
Note:
  • Presence Services supports JWT Bearer tokens.
  • Presence Services supports following JWT algorithms: RS256, RS512, ES256 and ES512.
  1. On the System Manager web console, navigate to ElementsAvaya Breeze®Configuration.
  2. Click Attributes.
  3. On the Service Clusters tab, in the Cluster field, click the Presence Services cluster.
  4. In the Service field, click the Presence Services service.
  5. On the Attributes Configuration page, navigate to the Client REST Services group.
  6. In Effective Value, do the following:
    1. In the Enable Client REST Services field, click True.
    2. In the Authentication Mechanism field, click Enterprise.
    3. In the OAuth2 - Authentication Server Public Key field, enter the Public Key of the Authentication Server which issues the token in PEM PKCS#8 format. For example, start with -----BEGIN PUBLIC KEY-----.
    4. In the OAuth2 - User Id Token Key field, enter the name of the claim within the token which carries user identity. This user identity must always be the email address of the user on System Manager.
    5. In the OAuth2 - JWT Algorithm field, enter the name of the Cryptographic Algorithms for Digital Signatures and MACs used by Authentication Server to generate JWTs. This setting must match with the setting on authentication server.
  7. Click Commit.
Related links
Enterprise IWA over Kerberos authentication to authenticate REST API clients