OAuth 2.0 Grant Type: JWT

The Salesforce source supports the JSON Web Token (JWT) Grant type.

Note
If you experience any issues with this configuration, refer to the Troubleshooting topic.

  1. Enter the Salesforce username in the Subject field.

  2. Enter the OAuth Client ID for the connected application for which you registered the certificate in the Issuer field.

  3. Enter the recipient for which the JWT is intended in the Audience field.

  4. Enter the Private Key to be used to assert the JWT.

    For information on generating the JWT assertion, refer to Generating a JWT Assertion.

    Note
    The private key should be in standard PKCS #1 format. Currently, SailPoint doesn't support private keys in PKCS #8 format.

  5. Enter the Private Key Password for the Private Key.

    Note
    This is only needed if the Private Key is encrypted with a passphrase.

  6. Select Save.

Note
Additional JWT Header and JWT Payload can be added with the additionalJwtHeader and additionalJwtPayload attributes, respectively using the REST API, if required per the managed system.

For information on the REST APIs, refer to Authentication and Update Source (Partial) in the SailPoint Developer Community.