Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Locate the Trust Marks Section

    In the current configuration, the `trust_marks` are defined under: 

    Code Block
    languageyml
    trust_marks:
      - <existing-trust-mark-1>
      - <existing-trust-mark-2>

    You need to replace these values with the new Trust Marks provided by the federation operator.

  2. Example Update 

    If the federation operator provided the following new Trust Marks:

    Code Block
    languageyml
    eyJhbGciOiJSUzI1NiIsImtpZCI6IjM2NWQ2MjY3LTI5MzQtNGJhNy05YjEyLWU4ZmFkNTYwYjZjMyJ9...
    eyJhbGciOiJSUzI1NiIsImtpZCI6IjkwNTFjZTgzLTY1NzEtNDliYi04ODdjLTc3OWQzMDNmOTRmYyJ9...

    Modify the `trust_marks` section as follows: 

    Code Block
    languageyml
    trust_marks:
      - eyJhbGciOiJSUzI1NiIsImtpZCI6IjM2NWQ2MjY3LTI5MzQtNGJhNy05YjEyLWU4ZmFkNTYwYjZjMyJ9...
      - eyJhbGciOiJSUzI1NiIsImtpZCI6IjkwNTFjZTgzLTY1NzEtNDliYi04ODdjLTc3OWQzMDNmOTRmYyJ9..


  3. Restart the Issuer to Apply Changes

    Once you've updated the configuration file, restart the Issuer container to apply the changes: 

    Code Block
    languagebash
    ./stop.sh && \
    ./start.sh


  4. Verify the Changes
    After restarting SATOSAthe Issuer, verify that the new Trust Marks are correctly applied:

    Code Block
    languagebash
    curl -k -s https://<issuer-host>:8000/.well-known/openid-federation | cut -d '.' -f2 | tr '_-' '/+' | base64 -d 2>/dev/null | jq .

    Look for the updated `trust_marks` in the JSON response.

...