Configuring IBM Security Verify as Oauth2 provider

Nikolai Maltsev

October 23, 2026 09:15 Updated

Create new application. Open it's settings.
Move the Sign-On tab.
In the Sign-on method pick Open ID Connect 1.0
Application URL: {TBE deployment URL}
Grant types - Authorization code
Redirect URIs: {TBE deployment URL}/api/login/authenticated
Uncheck Require proof key for code exchange (PKCE) verification
Everything else leave as default
Click "Save"
Take Client ID and generated Client secret into tbe.auth.client_id and tbe.auth.client_secret properties of the application.yaml.
On the right side of the screen notice "Provide the IBM Security Verify endpoint by using the following format:" followed by the url. This is where most of the parameters for application.yaml. Open the link.
Find there fields in bold and put in the corresponding properties in application.yaml in TBE, as below:
- authorization_endpoint = tbe.auth.login-url
- token_endpoint = tbe.auth.token-url
- jwks_uri = tbe.auth.jwt-certs-url
On the Entitlements tab add user.
Enjoy!

image(1).png

image(2).png

image(3).png

image(4).png