IAM

OAuth2 / OIDC Provider

CoreLink acts as a full OAuth2 and OpenID Connect identity provider for external applications. Register OAuth client applications, issue authorization codes and access tokens, and expose standard discovery endpoints: /.well-known/openid-configuration, JWKS, UserInfo, and token revocation. Supported grants include authorization code with PKCE, client credentials, refresh token, and device authorization.

Downstream systems -- AWS STS, Azure AD Workload Identity Federation, GCP STS, or any OIDC-aware app -- federate directly to CoreLink without needing a separate IdP. Consent screens, scope-based permissions, and per-client token lifetimes are fully configurable.

OAuth2 / OIDC Provider screenshot

Key Configuration

  • Client application registration (name, redirect URIs, allowed grants)
  • Scope definitions and consent requirements
  • Access token and refresh token lifetime
  • Signing algorithm (RS256, ES256, EdDSA)
All documentation Question about this? Talk to us