Create token broker registrations

Learn how to create token broker registrations used for the browser extension in SaaS.

To access Token broker registrations, you require the Snow Atlas System administrator and Administrator roles.

Prerequisites

You require a JWT signing certificate. It must not contain private keys. For more information, see Certificates required.

Procedure

Add a token broker registration in Snow Atlas to generate the credentials that you require to install the token broker proxy, which ensures a secure connection between the browser extension and Snow Atlas.

For field descriptions, see Create token broker registrations: Reference.

1. In Snow Atlas, go to Settings, and select SaaS settings.

2. On the Token broker registrations page, select Add.

3. On the Add token broker registration page:

   1. Enter a Name.

      The name is used to identify the registration in the list, so you are recommended to use a unique one.

   2. Optional: In Description, enter additional information for your own internal use.

   3. Select your Enrollment site from the list.

      This selection cannot be changed later. For more information, see Enrollment sites.

   4. In Certificate, upload the JWT signing certificate that you intend to use with the token broker proxy.

      Supported format is PEM, with file extension .pem or .crt. The file must not contain private keys.

4. Select Create.

   The token broker registration is now created and your credentials are generated.

5. Copy the Client ID and Secret key. They are used in the configuration of the token broker proxy.

   caution

   The Secret key is only displayed once and cannot be accessed again. If you lose it, you must register a new one.

   You cannot close the registration without copying the secret key.

6. Select Close.

   The token broker is added to the table on the Token broker registrations page.

After creating a token broker registration, see Install token broker proxy, and then Configure browser extensions.