Application trusted issuer assignments
The trusted issuer assignments endpoint associates a trusted issuer with a specified application. By assigning trusted issuers to an application’s configuration, the PingOne authorization server will accept third-party signed JWTs (as subject or actor tokens in a token exchange action) from the trusted issuer.
Trusted issuers can be assigned to applications that use the token exchange grant type (urn:ietf:params:oauth:grant-type:token-exchange). In these cases, the subject_token_type or actor_token_type parameter value must be set to urn:ietf:params:oauth:token-type:jwt.
Trusted issuer assignments data model
| Property | Type | Required | Mutable | Description |
|---|---|---|---|---|
|
Object |
Required |
Mutable |
Object that contains the application ID. |
|
String |
Required |
Mutable |
The ID associated with the resource. |
|
Object |
N/A |
Immutable |
Object that contains the environment ID. |
|
String |
N/A |
Immutable |
The identifier of the environment resource referenced by this relationship. |
|
Object |
Required |
Mutable |
Object that contains the trusted issuer ID. |
|
String |
Required |
Mutable |
The ID associated with the resource. |
Trusted issuer assignments events generated
Refer to Audit Reporting Events for the events generated.