IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  /par and Dpop(/token)

    Posted Wed October 15, 2025 12:36 PM
    Edited by SHARATH YERAMALLA Wed October 15, 2025 12:39 PM

    Hi there,

    In I BM security verify access vr 10.0.8 , Is there any sample to refer /par and dpop(/token) where i want to use keys rather secret to peform this and want to  issue some custom claims into jwt access_tk and id_token. Pls provide a sample for it.

    When a id_token and access_tk created does it stores automatically in hvdb during pre-token/post-token processing,if so how to avoid to store that? 

    thanks



    ------------------------------
    Popleys
    ------------------------------



  • 2.  RE: /par and Dpop(/token)

    Posted Thu October 16, 2025 01:14 AM

    HI

    You need to make use of :IVIA OP 

     https://www.ibm.com/docs/en/sva/11.0.1?topic=support-verify-identity-access-oidc-provider

    https://docs.verify.ibm.com/ibm-security-verify-access/docs/overview-introduction

    1. PAR - https://docs.verify.ibm.com/ibm-security-verify-access/docs/oauth2-par
    2. DPOP - https://docs.verify.ibm.com/ibm-security-verify-access/docs/oauth2-dpop
    3. examples: https://github.com/IBM-Security/verify-access-oidc-provider-resources



    ------------------------------
    Tushar
    Tushar
    ------------------------------



  • 3.  RE: /par and Dpop(/token)

    Posted Fri October 17, 2025 10:03 AM

    Hi Tushar, Pls could you update the response again here, for some reason i clicked something and I lost it.thanks



    ------------------------------
    popleys popleysy
    ------------------------------