server.xml

<server description="microservice-ssoserver">

    <!-- Enable features -->
    <featureManager>
      <feature>ssl-1.0</feature>
      <feature>appSecurity-2.0</feature>
      <feature>openidConnectServer-1.0</feature>
      <feature>servlet-3.1</feature>
      <feature>logstashCollector-1.0</feature>
    </featureManager>

    <httpEndpoint id="defaultHttpEndpoint"
        host="*"
        httpPort="9080"
        httpsPort="9443" />

    <!-- this is in a configMap
    <basicRegistry id="basic" realm="OpBasicRealm">

    </basicRegistry>
    -->

    <oauth-roles>
        <authenticated>
            <special-subject type="ALL_AUTHENTICATED_USERS" />
        </authenticated>
    </oauth-roles>

    <!-- this is a sample configuration from the microprofile-conference demo.  Replace with
        configuration for your application -->
    <openidConnectProvider id="OP"
         oauthProviderRef="Oauth"
         signatureAlgorithm="RS256"
         issuerIdentifier="https://trustme"
         jwkEnabled="true"/>

    <oauthProvider id="Oauth" jwtAccessToken="true" httpsRequired="true" >
        <localStore>
            <client name="rp" secret="rpSecret" displayname="rp" resourceIds="abc123"
                scope="openid profile scope1 email phone address" enabled="true">
                <redirect>https://${env.EXTERNAL_IP_ADDR}</redirect>
                <redirect>https://${env.EXTERNAL_IP_ADDR}:31015/oidcclient/redirect/rp</redirect>
             </client>
        </localStore>
    </oauthProvider>

<!--
    <logging  traceSpecification="com.ibm.ws.security.oauth*=all:com.ibm.ws.security.openid*=all"
      traceFileName="trace.log" maxFileSize="20" maxFiles="10" />
-->

</server>