RMDIAGX Test Client Client SSO
OAuth2 consumer for the VNSM Client SSO feature (BFMS-1196).
About this app
This is a minimal OAuth2 consumer that exercises the VNSM Client SSO endpoints end-to-end:
- Click Sign in via VNSM → browser redirects to
/client-sso/login on VNSM.
- VNSM authenticates the user (Azure SSO for
@bajajauto.co.in, or password + email OTP).
- VNSM redirects back to
https://fms-client-sso.appmaaza.com/oauth/callback with ?code=….
- This app exchanges the code (server-to-server) for an RS256 JWT + opaque refresh token.
- The JWT is verified locally against VNSM's JWKS, then the dashboard renders its claims.
Configuration
VNSM base URL https://rbac.fms.appmaaza.com
client_id rmdiagx
client_secret set? yes
redirect_uri https://fms-client-sso.appmaaza.com/oauth/callback
expected iss https://fms.bajajauto.co.in
expected aud rmdiagx
Sign in via VNSM