Creating a Salesforce Issuer
Use the post /v1/cckm/sfdc/issuers API to create a valid JWT issuer (third-party IDP). When creating the issuer, you must specify a unique name along with one of the following combinations.
issuer and jwks_uri
openid_config_url: will be used to auto-fetch the issuer and jwks_uri
Syntax
curl -k '<IP>/api/v1/cckm/sfdc/issuers' -X POST -H 'Authorization: Bearer AUTHTOKEN' --compressed
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| AUTHTOKEN | string | Authorization token. |
| name | string | Name of the issuer. It should be unique. |
| issuer (optional) | string | URL for the issuer. |
| jwks_uri (optional) | string | URI of JWKS, for example, https://abc.auth0.com/.well-known/jwks.json. |
| openid_config_url (optional) | string | OpenID configuration URL for the issuer. |
Example Request
curl -k 'https://127.0.0.1/api/v1/cckm/sfdc/issuers' -X POST -H 'Authorization: Bearer eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIxYjQ0YmEyNi03YjJhLTQ1NDItOWI1NS0zMjU4NDJkZTJjMDUiLCJzdWIiOiJsb2NhbHxjMGIzNmIxZi1kODdjLTQ5MTctYTUxNy03MjY0MmNkZWM1OTIiLCJpc3MiOiJreWxvIiwiYWNjIjoia3lsbyIsInByZWZlcnJlZF91c2VybmFtZSI6ImFkbWluIiwiY3VzdCI6eyJjbGllbnRfaWQiOiI4MzdjODQwZC03NWRkLTRiNGYtYTMxOC03OWNiMTZjYTI0OGQiLCJjbGllbnRfbmFtZSI6ImFwaS1wbGF5Z3JvdW5kIiwiY2xpZW50X3R5cGUiOiJwdWJsaWMiLCJkb21haW5faWQiOiIwMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAiLCJncm91cHMiOlsiYWRtaW4iXSwic2lkIjoiODM3Yzg0MGQtNzVkZC00YjRmLWEzMTgtNzljYjE2Y2EyNDhkIiwiem9uZV9pZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMCJ9LCJqd3RpZCI6ImM3NmY4MzA3LTcyM2EtNDRlZi1iZWNlLTZiZDhhZjE5Mzc4NCIsImlhdCI6MTcyMDUxODA5OSwiZXhwIjoxNzIwNTE4Mzk5fQ.vxjA6ApjVmqL80LQY7hOXbmtUHvRoyiu2pgww8fST43_OenBUrz3fK0pzEjU9IsVPjlRonphTCifFYMy7bRO9g' -H 'accept: application/json' --compressed
Example Response
{
"id": "632c68fa-e14d-4f69-be41-a7ca84e1f750",
"uri": "kylo:kylo:cckm:sfdc-issuer:issuertwo2-632c68fa-e14d-4f69-be41-a7ca84e1f750",
"account": "kylo:kylo:admin:accounts:kylo",
"createdAt": "2024-06-06T10:44:04.733321Z",
"updatedAt": "2024-06-06T10:44:04.733321Z",
"name": "issuerTwo2",
"openid_config_url": "https://www.example.com/openid-configuration",
"issuer": "https://issuer.com",
"jwks_uri": "https://www.example.com/jwks.json"
}
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
| 5xx | Server errors |
Refer to HTTP status codes for details.
