Network & Firewall Considerations

The Trust Platform will require connectivity to IDPartner services in order to function correctly. At a minimum, it is expected to require the following:

Outbound Connectivity

Outbound connectivity will be required to support:

Endpoint	Description
https://auth-api.idpartner.com	Sending billing events. Retrieving Trust Packages. Redirect to broker for IDP persistence and display QRCode/Push UX. Retrieves RP details such as client ID to support the OIDC flows.

Inbound Connectivity

Inbound connectivity will be required to support:

• .well known, PAR and token endpoints - must be accessible by all participants within the scheme.

• Backchannel API endpoints used to manage the out-of-band UX from the IDPartner Network <backchannel-authentication-service>/backchannel/auth/* - must be accessible by all participants within the scheme.