#1171 - Private Agent Framework - OIC Authorization

Introduction

There are multiple authorization options available when connecting to OIC based MCP Servers from PAF. Let's check them out - 

Bearer Token

This is good for quick demos etc. You can use an existing confidential app, which is configured for OIC. The downside here is that the token is not refreshed, so you end up going back and forth to Postman to generate tokens, then copying and pasting them into PAF.

OAuth Configuration

Here you need to create a Confidential App for PAF - 

Copy client id and secret. Then let's look at the OAuth configuration - 

The redirect URL needs to point to PAF - 

The URL format is as follows - 

Take your base PAF URL then add /agentFactory/v1/tools/mcp/callback

Add the usual OIC resources - 

The final step is to activate the app; then you're good to go.

I now go back to PAF and create the OAuth based connection to my OIC MCP server -

As you can see, the refresh URL is available here. 

I add the client id and secret - 

The IDCS URL used for the following - 

is the one you already use for your OIC instance. I copy it from postman - 

https://myIDCS/oauth2/v1/token

use this for Token and Refresh URLs.

Set Authorization URL to 

https://myIDCS/oauth2/v1/authorize
 

Set Scopes to the usual OIC scopes. These I copy from postman.

Click Test - then you will see the following message -

Click Save MCP server - 

Summa Summarum

Like most things, the process is simple enough; you just need to know what to do.

Come to think of it, that's quite philosophical!