Code Challenge and Code Verifier
If your organization has the PKCE extension enabled, you need to get a Code Challenge and a Code Verifier in order to properly configure your installation. For detailed information on PKCE, please see this article.
There are two possible scenarios where this will apply:
- You have configured the PKCE extension across your organization, requiring that all connected apps ask for it, AND the fix from bridge app has not been implemented yet.
- You have configured PKCE extension across your organization, requiring that all connected apps ask for it, BUT although the bridge app is fixed, for some other reason it is not working for some other reason.
As you can see, the Code Challenge and Verifier fields are not required by default, since they are only needed in the scenarios we mentioned above. if you need to enter these values, there are several online sources to generate the code verifier and code challenge for OAuth with PKCE. The following are some examples of sites you can use:
- PKCE Online Generator
- Ping Identity PKCE Generator (a more complete tool)
- Online PKCE Generator Tool