Configuration screen
Integrations > OAuth > Configuration
The Configuration screen manages the global OAuth settings for the instance. Some settings may be overridden for individual Clients.
Important: Use this screen for information and avoid using it for configuration. You may change the global timeouts, but it is better to override them on the Clients screen.
URLs
These read-only properties are the endpoints configured for this instance.
- Oauth Token endpoint
- URL to the OAuth server's token-endpoint for this company. This is where applications request tokens.
- Oauth Authorization endpoint
- URL to the OAuth server's authorization-endpoint for this company. This is where applications request authorization.
- JwksURL
- URL to the JSON Web Key Set applications use for information exchange and authorization for this company.
Timeouts
Timeout properties determine how long and how often clients have access to a server's resources.
Important: For a detailed discussion of these properties, and for example scenarios of different configurations, see Configure OAuth timeouts.
- Access token lifetime (seconds)
- Access tokens grant access to resources for a short period of time. After they expire, the application may request new tokens. (Default 3600 or 1 hour.)
- Refresh token lifetime (hours)
- Refresh tokens authorize clients to request access tokens for a period of time. After they expire, clients must re-authenticate (such as re-sign in) to acquire a new refresh token. (Default 720 hours.)
- Refresh token idle timeout (seconds)
- Refresh idle is how long the connection may be idle (inactive) before forcing the client to re-authorize (re-sign-in). (Default 5400 or 90 minutes.)
- Authorization code lifetime (seconds):
- Authorization codes are one-time use-codes used during authorization. The OAuth server issues the code to the client, and the client must immediately return it to the OAuth server when requesting the first access token. (Default 300 or 5 minutes.)
OpenID Connect IDP Signing Key
Some applications use OpenID Connect for signing requests. These properties report the settings used for this company.
Warning: Do not change these settings without first getting confirmation from Medallia, Inc..
- Refresh IDP Signing keys daily
- Change the IDP signing keys daily. Otherwise (when not checked) the keys are not automatically changed. You can manually force a change with the RefreshidpKeyNow button.
- RefreshidpKeyNow
- Forces an immediate refresh of the IDP signing keys.
- Signing key algorithm
- (read-only) Current signing-key algorithm. Cannot be changed.
- IDToken signing keyid
- (read-only) ID for the current key used for signing tokens.
- IDToken signing key
- (read-only) Public key for the current key used for signing tokens.
- IDToken signing keyid (Old)
- (read-only) Previous public key ID (used before the last refresh).
- IDToken signing key (Old)
- (read-only) Previous public key (used before the last refresh).
