Setup required
The service is running, but it has no identity domain credentials yet, so it refuses to pretend it can sign anyone in.
Missing environment variables
IAM_DOMAIN_URLIAM_CLIENT_IDIAM_CLIENT_SECRETPORTAL_TENANCY_OCID
What to do
- 1 Create a Confidential Application in the tenancy's identity domain with the Authorization Code and Client Credentials grants.
- 2 Register the redirect URI
https://oci.oci2.legido.com/auth/callback. - 3 Put the domain URL, client id and client secret in the container
environment (
IAM_DOMAIN_URL,IAM_CLIENT_ID,IAM_CLIENT_SECRET) and restart the container.
The full sequence, including the identity propagation trust, is in
specs/001-vault-portal-mvp/quickstart.md.