Register the identity provider for your app
The
BlackBerry AppSecure SDK
reuses the existing user identity within your application to facilitate getting the latest security threat information from the BlackBerry
Cloud. The library works with your user identity and management systems to provide strong authentication and authorization.In practice, an
OpenID Connect
Identity Token belonging to the user that is currently logged in is provided to the BlackBerry AppSecure SDK
runtime. BlackBerry
validates this token against your identity provider's token introspection endpoint. This process avoids the need to rely on an application-specific API key.You can use any identity provider as long as it is compliant with
OpenID Connect
(https://openid.net/connect/). For more information, see Information about compliant IDPs. If you don't have an identity provider, you can use
Firebase
as your identity provider (IDP). When the IDP is registered, you are provided a
BlackBerry
App Client ID which you add to your app. - Verify that you have the following information:
- The discovery URL of your IDP
- The Authorized Client ID for your app
- In your organization'sBlackBerryOnline Account, on the navigation menu, clickApplications.
- Click your app.
- On theIDPtab, in theIdentity Providersection, do the following:.
- In theDiscovery URLfield, type the discovery URL of the identity provider.
- In theClient IDfield, type the Authorized Client ID.
No other fields are required. - ClickRegister IDP.A BlackBerry App Client ID is created.