diff --git a/modules/reference/pages/feature/openidConnectClient/examples.adoc b/modules/reference/pages/feature/openidConnectClient/examples.adoc index 404402c81..9ed1d60e8 100644 --- a/modules/reference/pages/feature/openidConnectClient/examples.adoc +++ b/modules/reference/pages/feature/openidConnectClient/examples.adoc @@ -109,8 +109,8 @@ The following `server.xml` file example shows two Open ID connect client configu [source,xml] ---- - - + + ... @@ -121,9 +121,9 @@ The following `server.xml` file example shows two Open ID connect client configu Open Liberty selects the `openidConnectClient` configuration to use for a JWT request according to the following algorithm. 1. If the authentication filter for a `openidConnectClient` configuration matches the request, choose that configuration. -2. If the issuer claim from the JWT matches the `issueridentifier` attribute in only one `openidConnectClient` configuration element, choose that configuration. -3. If the issuer claim from the JWT matches the `issueridentifier` attribute in multiple `openidConnectClient` configuration elements, choose the first configuration that matches. -4. If the issuer claim from the JWT does not match the `issueridentifier` attribute in any `openidConnectClient` configuration elements, choose between all of the configuration elements in a nondeterministic manner. +2. If the issuer claim from the JWT matches the `issuerIdentifier` attribute in only one `openidConnectClient` configuration element, choose that configuration. +3. If the issuer claim from the JWT matches the `issuerIdentifier` attribute in multiple `openidConnectClient` configuration elements, choose the first configuration that matches. +4. If the issuer claim from the JWT does not match the `issuerIdentifier` attribute in any `openidConnectClient` configuration elements, choose between all of the configuration elements in a nondeterministic manner. Claim to subject mapping:: If you do not define claim-to-subject mapping, the following default rules apply.