IS /sign endpoint supported on Entra ID?

Question

Hello Team,

I am currently setting up OAuth2 on NETIQ SSPR for the Forgotten Password module, using Entra as the verification method.

According to the SSPR documentation, Entra needs to support the following endpoint for proper functionality:

"The remote OAuth server must support the non-standard /sign endpoint for this to work."

However, when I registered the SSPR application on Entra, I couldn't find any information or documentation regarding the /sign endpoint.

Could you please confirm if this endpoint is supported by Entra?

Regards,

Answer 1

Hello @Navarro Gustavo,

Thank you for posting your query on Microsoft Q&A.

Based on your description, you are currently setting up OAuth2 on NETIQ SSPR for the Forgotten Password module, using Entra as the verification method and you want to know whether /sign endpoint is supported in Microsoft Entra ID or not.

Please note that Online Service Provider(OSP) provides a non-standard OAuth 2.0 endpoint for signing additional data that can be passed during the grant request. The URL of the sign endpoint is: https://<serverip>/osp/a/TOP/auth/oauth2/sign.

The sign endpoint helps to create a signed and encrypted data packet that can be used to supply data to other endpoints.

The only endpoint with which the signed data is currently used is the grant endpoint when it is used with the authorization code grant and implicit grant types.

Please note that there is no explicit /sign endpoint in Microsoft Entra ID.

I hope this above information provided is helpful. Please feel free to reach out if you have any further questions.

If the above answer is helpful, please click "Accept Answer" and kindly upvote it. If you have additional questions about this answer, please click "Comment".

Thanks and Best Regards,

Sanoop Mohan