Add external Idp with OIDC using private_key_jwk

Question

I have setup an External identity with custom oidc. I want to use private_key_jwk, but I cannot find the place to provide my private key.

As specified in the documentation:

Client ID and Client Secret are the identifiers your identity provider uses to identify the registered application service. Client secret needs to be provided if client_secret authentication is selected. If private_key_jwt is selected, private key needs to be provided.

https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-custom-oidc-federation-customers

Answer 1

Thank you for the feedback, Jenny. For private_key_jwt implementation, you'll need to use the jwk endpoint which is expected to be predefined in the well-known endpoint. This structure is used for rolling keys automatically using the jwk endpoint. However, we also have alternative plans to support key pairs for private_key_jwt.