GENERAL DESCRIPTION |
This API/RPC uses either VA Identity and Access
Management (IAM) or Microsoft EntraID JSON Web Token (JWT) payload attributes
to authenticate a user. The type of JSON Web Token (JWT) must be a
"transparent" token, meaning it must contain a readable header, payload, and
signature. This API/RPC will validate the contents and signature of the JSON
Web Token (JWT). In addition, the issuer within the JWT payload must match an
issuer in the TOKEN VALIDATION DATA (#8981) file on the VistA system which
contains valid Identity Providers (IdPs) that are authorized to issue JSON Web
Tokens (JWTs).
|