Documentation IDP Usage for external IDP Connection

General
,
1

Hi,

I am trying to authenticate against the Milestone API Gateway using an external IdP (e.g., Keycloak), but I cannot find any documentation that explains the required authentication flow.

The only relevant example I found is the OAuthLoginFlow sample:

From what I understand, the process is roughly:

  1. Obtain an access token from the external IdP.
  2. Submit that token to the Milestone /IDP endpoint.
  3. Receive a Milestone-issued token.
  4. Use that token to access the API Gateway.

However, the sample only shows code and does not explain the protocol itself. To understand the implementation, I would basically have to reverse-engineer the sample and guess which claims, scopes, audiences, and attributes are required.

Additionally, the endpoint “/IDP/.well-known/openid-configuration” does not provide enough information to understand the complete flow.

Is there any official documentation describing:

  • External IdP integration (especially Keycloak)?
  • Required token claims and mappings?
  • Token exchange with Milestone IDP?
  • Service account / machine-to-machine authentication scenarios?

I received the OAuthLoginFlow sample from Bo EllegĂĄrd Andersen (Milestone Systems), which was helpful, but it is not sufficient to implement an external IdP integration without further documentation.

Any guidance or documentation would be greatly appreciated.

Thanks!

3

Hi Maurer,
I attach a documentation, but this is draft version. It means that it has not been tested outside Milestone Development and not official yet. However, I hope this description might be helpful.

TOKEN_EXCHANGE_HOWTO.zip (1.9 KB)

1 Like
4

Thank you very much, I will check it out and test it!