Powered by Zoomin Software. For more details please contactZoomin

Secure MarkLogic Server

The OAuth Server Fields

  • Last Updated: May 20, 2026
  • 2 minute read
    • MarkLogic Server
    • Version 12.0
    • Documentation

The OAuth Server fields appear when either Authentication or Authorization is oauth.

Field

Description

OAuth Flow Type

The type of flow that the OAuth server will support:

  • Resource server: MarkLogic Server acts as a resource server, accepting tokens but erroring out if no token is provided.

OAuth Vendor

The third-party authorization vendor that will be used with the OAuth server.

OAuth Client ID

Client ID of the OAuth server on the vendor.

OAuth JWT Issuer URI

(OAuth Vendor = Microsoft Entra or Amazon Cognito) MarkLogic Server verifies that this URI matches the URI provided in the JWT Token.

OAuth Token Type

The access token format.

OAuth Username Attribute

(Required) The claim name to store the username information extracted from the access token.

OAuth Role Attribute

(Required) The claim name to store the role information extracted from the access token.

OAuth Privilege Attribute

(Optional) The claim name to store the privilege information extracted from the access token.

OAuth JWT Algorithm

(OAuth Token Type = JSON Web Tokens) Signature algorithm for JWT access tokens:

  • HS256 (Symmetric)

  • RS256 (Asymmetric)

OAuth JWT Secrets

The list of secrets MarkLogic Server should use to verify JWT access tokens, also known as validating the JWT access token signature.

  • If OAuth JWT Algorithm is a symmetric one, then use either Hex- or Base64URL-encoded JWL Secrets.

  • If OAuth JWT Algorithm is an asymmetric one, then use PEM-encoded JWT Secrets.

Note:

The JWT Secrets field secures both symmetric and asymmetric signature keys.

OAuth JWKS URI

(Optional) JSON Web Key Sets Endpoint for obtaining JSON Web Keys. URI must support TLS (HTTPS) or be a loopback URI.

Note:

If you are using an asymmetric algorithm, then you can specify a JWKS URI to validate incoming JWT access tokens with JWKS instead of with JWT Secrets signature keys.
TitleResults for “How to create a CRG?”Also Available inAlert