Configuring the Advanced Authentication OAuth 2.0 Event

  1. Open the Advanced Authentication Administration portal.

  2. Click Events > New Event.

  3. Specify a name for the event.

  4. Select OAuth2 from Event type.

  5. Select the required chains to assign to the event.

  6. In Risk Policy, select the policy that you want to assign to this event for assessing the risk associated with a login attempt.

  7. Click Create New Policy to create a new risk policy for this event.

    Clicking this option opens the Risk Settings page.

    IMPORTANT:Risk Policy and Create New Policy options are available when you enable Risk Settings. For more information, see Risk Settings and Risk Policy.

  8. In Redirect URIs, specify https://<privilege-account-manager-ipaddress>/sso. After successful authentication, users are directed to this URL.

    If there are multiple PAM managers, you can specify all URLs as the Redirect URI. So, users can access the preferred instance of PAM.

    For example, if there two PAM managers https://www.pam-abc.com/sso and https://pam-123/sso, specify both the URLs in Redirect URIs.

    NOTE:The Client ID and Client secret are generated automatically. You cannot view the Client secret later, therefore you must make a note of this value as these are required to complete the configuration in Privileged Access Manager.

  9. Click Save.