OAuth 2.0 JWT and OIDC support
The MarkLogic 11.0 release expanded the external authentication options by adding support for OAuth 2.0. MarkLogic 11.2 builds on this and adds support for OpenID Connect (OIDC) with JSON Web Tokens (JWT). MarkLogic can now be configured to use OAuth-based authentication and authorization flows using JWT access tokens with leading identity management systems. Specific instructions are provided for PingIdenty, Microsoft Entra, and Amazon Cognito but other vendors that support OIDC with JWT are expected to work as well. See OAuth-Based Authentication and Authorization in Securing MarkLogic Server for details.
Also see Security-sec (sec.) for the complete list of built-in functions available for configuring external security.
Notice
Based on feedback, the “Introspection” token support that was added in 11.0 has been deprecated and the APIs removed in 11.2 (see OAuth “Introspection” Access Token Validation no longer available as of 11.2 for additional details).