What is the important prerequisite configuration for successful JWT authentication between FDI and a Fusion Application?

What is the important prerequisite configuration for successful JWT authentication between FDI and a Fusion Application?

• A. Upload the private key in the source Fusion Application.
• B. Upload the public key certificate in the source Fusion Application.
• C. Upload both of the X509 key pairs in the source Fusion Application.
• D. No key material is required.

Answer: (B)

JWT authentication relies on an asymmetric key pair: the token is signed with a private key and verified with the corresponding public key. For a Fusion Application to trust and validate tokens issued by the other side, it needs access to the public key certificate of the signer. Uploading the public key certificate in the source Fusion Application makes this verification possible without exposing any private keys. The private key must stay secure on the signing side and is never shared. That’s why the best prerequisite is sharing the public certificate; it enables verification of the JWT while keeping key material protected. Uploading the private key, or both keys, or having no key material at all would break the secure verification process.

JWT authentication relies on an asymmetric key pair: the token is signed with a private key and verified with the corresponding public key. For a Fusion Application to trust and validate tokens issued by the other side, it needs access to the public key certificate of the signer. Uploading the public key certificate in the source Fusion Application makes this verification possible without exposing any private keys. The private key must stay secure on the signing side and is never shared. That’s why the best prerequisite is sharing the public certificate; it enables verification of the JWT while keeping key material protected. Uploading the private key, or both keys, or having no key material at all would break the secure verification process.