How to use a Refresh Token to get a new Access Token with Oauth and OpenID

Follow
    Applies to:
SecureAuth IdP Version affected: All
Description: This KB article will show how to use a Refresh token with the Oidctoken.aspx endpoint in order to get a new Access Token
Cause: NA
Resolution:
Oidctoken.aspx can be utilized to get an Access Token from a refresh token instead of the User having to re-authenticate. 
 
Enabling Refresh tokens
1. In the Web Admin Console, Navigate to the Post Auth page of the realm in question
2. Click on the OpenID Client to get into the Client Details page
3. Set Refresh Token to True
4. Hit save.
 
 
What to Post in order for this to work
 
1. Post to https://youridp.example.com/secureauthxx/oidctoken.aspx
2. Needs to be x-www-form-urlencoded
3. Should contain the following
grant_type: refresh_token
client_id: The client id set in the post auth page
client_secret: The client secret set in the post auth page
redirect_uri: a valid redirect uri as set in the post auth page of the realm
refresh_token: The refresh token that you acquired during the previous Authorization_Code flow. 
refresh.png 
 
 
SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.
Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.