OpenID Connect LDAP schema update

The LDAP schema for storing the details of registered OpenID Connect clients was updated to match the latest version 19 of the registration draft. It comes with an open source Apache 2.0 license and you can use it to store all OpenID Connect related registration details in a LDAP directory, such as OpenDJ or Microsoft Active Directory:

  • The client identifier, access token and optional secret provisioned by the OpenID Connect server.

  • The client metadata, with optional language tags for human facing content, such as client name, logo, the selected JOSE algorithms for securing the various messages and tokens.

The schema was successfully deployed and tested on a OpenDJ 2.4.6 server.

Screenshot of OpenID Connect client registration LDAP
entry