ForgeRock OpenIDM Social-Registration with WeChat

This article talks about the customizations and configuration necessary to enable social-registration with WeChat, and further a quick demo of the end-user experience. This is not part of the product yet, and I built it using a clone of the openidm trunk. From a WeChat API instance standpoint, you do need an appid and secret. The only scope needed for this demo is snsapi_login and unlike what the documentation might lead you to believe, snsapi_userinfo is not needed. Moreover, that particular scope needs a higher authorization level.

WeChat uses an OAuth2 like 3-legged flow for authorizing a user. In that it is similar to OAuth2 helps in creating interfaces to the social authorization filters inside OpenIDM but the dissimilarities necessitate creation of a new authnfilter module and some rewriting of the OAuthHttpClient inside the identity-provider module in OpenIDM.

Read more at – ForgeRock OpenIDM Social-Registration with WeChat