ÃÛ¶¹ÊÓƵ

Current license requirement: No Workfront Fusion license requirement.

Or

Legacy license requirement: Workfront Fusion for Work Automation and Integration, Workfront Fusion for Work Automation

Current product requirement: If you have the Select or Prime ÃÛ¶¹ÊÓƵ Workfront plan, your organization must purchase ÃÛ¶¹ÊÓƵ Workfront Fusion as well as ÃÛ¶¹ÊÓƵ Workfront to use functionality described in this article. Workfront Fusion is included in the Ultimate Workfront plan.

Or

Legacy product requirement: Your organization must purchase ÃÛ¶¹ÊÓƵ Workfront Fusion as well as ÃÛ¶¹ÊÓƵ Workfront to use functionality described in this article.

Select algorithm with which you want to generate the JWT.

• HS256: HMAC using SHA-256 hash algorithm
• HS384: HMAC using SHA-384 hash algorithm
• HS512: HMAC using SHA-512 hash algorithm
• RS256: RSASSA-PKCS1-v1_5 using SHA-256 hash algorithm
• RS384: RSASSA-PKCS1-v1_5 using SHA-384 hash algorithm
• RS512: RSASSA-PKCS1-v1_5 using SHA-512 hash algorithm
• PS256: RSASSA-PSS using SHA-256 hash algorithm (only Node ^6.12.0 OR >=8.0.0)
• PS384: RSASSA-PSS using SHA-384 hash algorithm (only Node ^6.12.0 OR >=8.0.0)
• PS512: RSASSA-PSS using SHA-512 hash algorithm (only Node ^6.12.0 OR >=8.0.0)
• ES256: ECDSA using P-256 curve and SHA-256 hash algorithm
• ES384: ECDSA using P-384 curve and SHA-384 hash algorithm
• ES512: ECDSA using P-521 curve and SHA-512 hash algorithm

For each option item you want to add, click Add item and enter the item's key and value.

The following keys are available:

• algorithm: (default: RS256)
• expiresIn: Expressed in seconds or a string describing a time span (e.g., 2 days, 10h, 7d). A numeric value is interpreted as a seconds count. If you use a string, be sure to provide the time units (days, hours, etc.), otherwise milliseconds unit is used by default (120 is equal to 120ms).
• notBefore: Expressed in seconds or a string describing a time span (e.g., 2 days, 10h, 7d). A numeric value is interpreted as a seconds count. If you use a string, be sure to provide the time units (days, hours, etc.), otherwise milliseconds unit is used by default (120 is equal to 120ms).
• audience
• issuer
• jwtid
• subject
• noTimestamp
• header
• keyid
• mutatePayload: If true, the sign function will modify the payload object directly. This is useful if you need a raw reference to the payload after claims have been applied to it but before it has been encoded into a token.
• allowInsecureKeySizes: If true, allows private keys with a modulus below 2048 to be used for RSA.
• allowInvalidAsymmetricKeyTypes: If true, allows asymmetric keys which do not match the specified algorithm. This option is intended only for backward compatibility and should be avoided.