Users: oidc-agent

Mon, 01 Jan 0001 00:00:00 +0000

The oidc-agent is a command-line tool for managing OpenID Connect tokens developed by Karlsruhe Institute of Technology (KIT).

Obtain a Token

If you haven’t installed oidc-agent in your system, please read the installation guide.

Note

Please make sure that you have installed the version 4.3.0 or later

Make sure that the oidc-agent-service is started by executing the command:

$ eval `oidc-agent-service start`

To obtain a Token you need to execute the following command:

$ oidc-gen --pub --issuer https://aai.egi.eu/auth/realms/egi

$ oidc-gen --pub --issuer https://aai-demo.egi.eu/auth/realms/egi

$ oidc-gen --pub --issuer https://aai-dev.egi.eu/auth/realms/egi

Then enter a short name for the account to configure, and the scopes that the Access Token should contain.

Note

To get a Refresh Token you need to specify the offline_access scope in the requested scopes

After that, you need to log in either by visiting the provided URL or by scanning the displayed QR code, and then provide the user code displayed in the oidc-agent.

Last but not least, you will need to provide an encryption password to protect the obtained Access/Refresh Token.

For more information, please read the oidc-agent documentation.

Users: EGI Check-in Token Portal

Mon, 01 Jan 0001 00:00:00 +0000

The EGI Check-in Token Portal allows users to create Access and Refresh Tokens.

Obtain an Access Token

In order to obtain an Access Token from EGI Check-in Token Portal, please follow the steps below:

Go to https://aai.egi.eu/token and click on “Authorise” to authenticate yourself.
After logging in you will obtain an Access Token as it is shown below:
1. The value of the Access Token
2. The command to get user’s information from userinfo endpoint. Running this curl command will also print out your OIDC entitlements.
3. Obtain a Refresh Token (more info in Obtain a Refresh Token section)
4. View and manage the applications you have given permissions

Obtain a Refresh Token

In order to obtain an Refresh Token from EGI Check-in Token Portal, please follow the steps below:

Go to https://aai.egi.eu/token and click on “Authorise” to authenticate yourself.
After logging in click on “Create Refresh Token”:
Then you will be redirected back to EGI Check-in Token Portal and you will have obtained a Refresh Token:
1. The value of the Refresh Token
2. The command to generate new Access Token using the Refresh Token

Documentation – Obtaining Access/Refresh Tokens

Users: oidc-agent

Obtain a Token

Note

Note

Users: EGI Check-in Token Portal

Obtain an Access Token

Obtain a Refresh Token