# \#security **URL:** https://forums.pega.com/tag/security/35.md [Latest](https://forums.pega.com/latest.md) · [Categories](https://forums.pega.com/categories.md) · [Tags](https://forums.pega.com/tags.md) --- ## [OIDC Access Token expiration problem](https://forums.pega.com/t/oidc-access-token-expiration-problem/5903)
**Author:** [@MusaW148](https://forums.pega.com/u/MusaW148)\ **Replies:** 9\ **Last updated:** [October 20, 2026, 10:19am UTC](https://forums.pega.com/t/oidc-access-token-expiration-problem/5903 "2026-10-20T10:19:08Z")
Hi Everyone, I have OpenID connect authentication in my application (usingn pega 8.5.5) and it is working fine, until i found accesstoken expiration problem. After an authentication succeed, The Access Token received f… --- ## [KAFKA data via AVRO Schema](https://forums.pega.com/t/kafka-data-via-avro-schema/4231)
**Author:** [@KasunJ](https://forums.pega.com/u/KasunJ)\ **Replies:** 11\ **Last updated:** [October 19, 2026, 9:30pm UTC](https://forums.pega.com/t/kafka-data-via-avro-schema/4231 "2026-10-19T21:30:06Z")
Pega need to pass data to KAFKA via AVRO schema format. the connectivity in Kafka connection and Data set is successfully. however, In runtime, Data set it throws below exceptions. javax.net.ssl.SSLHandshakeExceptio… --- ## [Infinity 25 - DX API with Entra ID JWT](https://forums.pega.com/t/infinity-25-dx-api-with-entra-id-jwt/13797)
**Author:** [@LeonardoL173119511](https://forums.pega.com/u/LeonardoL173119511)\ **Replies:** 1\ **Last updated:** [October 16, 2026, 9:38am UTC](https://forums.pega.com/t/infinity-25-dx-api-with-entra-id-jwt/13797 "2026-10-16T09:38:57Z")
Hello all, I have a requirement to authenticate Microsoft Entra ID to DX API. Some context below: React SPA has the front end. -PEGA is the backend engine, DX API is exposed for orchestration. React authenticates th… --- ## [Kafka via Avro Schema](https://forums.pega.com/t/kafka-via-avro-schema/5942)
**Author:** [@AnggunMD](https://forums.pega.com/u/AnggunMD)\ **Replies:** 2\ **Last updated:** [October 15, 2026, 8:49pm UTC](https://forums.pega.com/t/kafka-via-avro-schema/5942 "2026-10-15T20:49:30Z")
Hi All, We use Kafka via Avro schema format; the connectivity in the Kafka connection and data set is successful, but when we run the data set, the Kafka table has the following exceptions: Caused by: com.pega.dsm.dnod… --- ## [How to Access OIDC Claims and OAuth Tokens During Operator Provisioning in Pega](https://forums.pega.com/t/how-to-access-oidc-claims-and-oauth-tokens-during-operator-provisioning-in-pega/12950)
**Author:** [@BrahmeshTech](https://forums.pega.com/u/BrahmeshTech)\ **Replies:** 9\ **Last updated:** [October 8, 2026, 8:45am UTC](https://forums.pega.com/t/how-to-access-oidc-claims-and-oauth-tokens-during-operator-provisioning-in-pega/12950 "2026-10-08T08:45:24Z")
OIDC Authentication - Model Operator Identification Based on ID Token Claims & Access Token Availability Hi Team, We are currently migrating our application from Pega On-Premises to Pega Cloud and replacing our existing… --- ## [OIDC JWT Signature Verification Fails](https://forums.pega.com/t/oidc-jwt-signature-verification-fails/13050)
**Author:** [@BrahmeshTech](https://forums.pega.com/u/BrahmeshTech)\ **Replies:** 4\ **Last updated:** [October 7, 2026, 10:46am UTC](https://forums.pega.com/t/oidc-jwt-signature-verification-fails/13050 "2026-10-07T10:46:43Z")
Hello, We are setting up an OIDC authentication flow using a truststore signature that is created from the OpenID Connect Provider’s well-known configuration URL. The keystore is configured using a JWKS URL reference. O… --- ## [SECU0019 Alert for activity call in javascript text file](https://forums.pega.com/t/secu0019-alert-for-activity-call-in-javascript-text-file/13624)
**Author:** [@NikithaK17847635](https://forums.pega.com/u/NikithaK17847635)\ **Replies:** 1\ **Last updated:** [September 29, 2026, 2:20pm UTC](https://forums.pega.com/t/secu0019-alert-for-activity-call-in-javascript-text-file/13624 "2026-09-29T14:20:12Z")
Hi, We have a section with a Run Script action on Submit button. The JavaScript function calls an activity using SafeURL, and the activity name is passed dynamically as a function parameter. We are getting SECU0019 - U… --- ## [DX Custom Components for Pdf download - Authentication error](https://forums.pega.com/t/dx-custom-components-for-pdf-download-authentication-error/13578)
**Author:** [@KarthikeyaG16906463](https://forums.pega.com/u/KarthikeyaG16906463)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 6:10am UTC](https://forums.pega.com/t/dx-custom-components-for-pdf-download-authentication-error/13578 "2026-09-25T06:10:33Z")
Hi, I created a custom DX component in VS Code for PDF download functionality and am trying to authenticate it so that I can publish the component. When I start the authentication process, I am redirected to the Pega l… --- ## [How to archive case and its associated artifacts](https://forums.pega.com/t/how-to-archive-case-and-its-associated-artifacts/7638)
**Author:** [@Will\_Cho](https://forums.pega.com/u/Will_Cho)\ **Replies:** 31\ **Last updated:** [September 9, 2026, 12:54pm UTC](https://forums.pega.com/t/how-to-archive-case-and-its-associated-artifacts/7638 "2026-09-09T12:54:19Z")
This article demonstrates the step-by-step configurations of how to archive old, resolved cases and their associated artifacts (such as child cases, work history and attachments) in Pega. Client use case Client has bee… --- ## [Constellation Dashboard Showing Inconsistent Counts](https://forums.pega.com/t/constellation-dashboard-showing-inconsistent-counts/11660)
**Author:** [@DaminiC5](https://forums.pega.com/u/DaminiC5)\ **Replies:** 3\ **Last updated:** [September 7, 2026, 7:26am UTC](https://forums.pega.com/t/constellation-dashboard-showing-inconsistent-counts/11660 "2026-09-07T07:26:30Z")
I am encountering an issue in Pega Constellation where the dashboard is rendering an incorrect case count. The implementation follows Constellation design guidelines, and the underlying auto-generated Report Definition … --- ## [How to execute activity for guest user while url encryption was enabled](https://forums.pega.com/t/how-to-execute-activity-for-guest-user-while-url-encryption-was-enabled/4276)
**Author:** [@GAVINHSU](https://forums.pega.com/u/GAVINHSU)\ **Replies:** 11\ **Last updated:** [September 4, 2026, 12:31pm UTC](https://forums.pega.com/t/how-to-execute-activity-for-guest-user-while-url-encryption-was-enabled/4276 "2026-09-04T12:31:49Z")
We’re currently running with PEGA 8.3.1, and trying to upgrade to PEGA 8.7.4. Previously, the pzAuth=guest can be used to run an activity for anonymous users. For example, via link: https://pegahost/prweb/IAC/!STANDARD… --- ## [How to mask data using Attribute-Based Access Control (ABAC)](https://forums.pega.com/t/how-to-mask-data-using-attribute-based-access-control-abac/5952)
**Author:** [@Will\_Cho](https://forums.pega.com/u/Will_Cho)\ **Replies:** 6\ **Last updated:** [August 31, 2026, 5:28pm UTC](https://forums.pega.com/t/how-to-mask-data-using-attribute-based-access-control-abac/5952 "2026-08-31T17:28:40Z")
This article shows step-by-step of how to mask sensitive data such as PII (Personal Identifiable Information) in Pega application using Attribute-Based Access Control (ABAC) security model in Pega Platform. (For how to e… --- ## [Pega Cloud OIDC – Which Token Is Used for JWT Assertion?](https://forums.pega.com/t/pega-cloud-oidc-which-token-is-used-for-jwt-assertion/13300)
**Author:** [@BrahmeshTech](https://forums.pega.com/u/BrahmeshTech)\ **Replies:** 0\ **Last updated:** [August 28, 2026, 3:10pm UTC](https://forums.pega.com/t/pega-cloud-oidc-which-token-is-used-for-jwt-assertion/13300 "2026-08-28T15:10:31Z")
Hello, We are migrating from Pega on-premises to Pega Cloud and implementing OIDC-based SSO. During the SSO login flow, our IdP system returns an id\_token, access\_token, and refresh\_token. We can access the id\_token fr… --- ## [How to Decrypt the OIDC Access Token from an Active SSO Session](https://forums.pega.com/t/how-to-decrypt-the-oidc-access-token-from-an-active-sso-session/13037)
**Author:** [@BrahmeshTech](https://forums.pega.com/u/BrahmeshTech)\ **Replies:** 0\ **Last updated:** [August 6, 2026, 11:32am UTC](https://forums.pega.com/t/how-to-decrypt-the-oidc-access-token-from-an-active-sso-session/13037 "2026-08-06T11:32:12Z")
Hellow.. We recently implemented OIDC SSO authentication in Pega. We can successfully view the ID token in D\_pyOIDCLoginInfo; however, the access\_token and refresh\_token stored in the pr\_data\_token table are encrypted w… --- ## [How to create OAuth 2.0 access token to call Pega API](https://forums.pega.com/t/how-to-create-oauth-2-0-access-token-to-call-pega-api/9477)
**Author:** [@Will\_Cho](https://forums.pega.com/u/Will_Cho)\ **Replies:** 20\ **Last updated:** [July 11, 2026, 8:54pm UTC](https://forums.pega.com/t/how-to-create-oauth-2-0-access-token-to-call-pega-api/9477 "2026-07-11T20:54:24Z")
This knowledge sharing article shows an implementation pattern of calling a Pega API, which requires an OAuth 2.0 authentication. It shows how to generate an OAuth 2.0 access token and how to call a Pega API using the ac… --- ## [How to configure certain security headers](https://forums.pega.com/t/how-to-configure-certain-security-headers/12307)
**Author:** [@SebastiaanH](https://forums.pega.com/u/SebastiaanH)\ **Replies:** 3\ **Last updated:** [June 17, 2026, 8:30pm UTC](https://forums.pega.com/t/how-to-configure-certain-security-headers/12307 "2026-06-17T20:30:13Z")
A little while ago our Constellation application went through a PEN test. As a result we got an advice on how to configure our security headers. I have been investigating the possibilities to configure these security hea… --- ## [PEGA-SESSION-COOKIE Secure](https://forums.pega.com/t/pega-session-cookie-secure/12348)
**Author:** [@JuanaMaria](https://forums.pega.com/u/JuanaMaria)\ **Replies:** 3\ **Last updated:** [June 11, 2026, 1:50pm UTC](https://forums.pega.com/t/pega-session-cookie-secure/12348 "2026-06-11T13:50:17Z")
Hi all, We have a request from our client security team to set the PEGA-SESSION-COOKIE as secure. We have Pega Platform 25.1.2 in Pega Cloud. We have created DSS prconfig/HTTP/SetSecureCookie/default , set its value t… --- ## [Pega Cloud's Zero Trust Advantage](https://forums.pega.com/t/pega-clouds-zero-trust-advantage/12126)
**Author:** [@glenc](https://forums.pega.com/u/glenc)\ **Replies:** 2\ **Last updated:** [June 3, 2026, 5:50pm UTC](https://forums.pega.com/t/pega-clouds-zero-trust-advantage/12126 "2026-06-03T17:50:12Z")
In today’s threat landscape, perimeter-based security is no longer enough. Pega Cloud is built on Zero Trust Architecture and the principle that no user, connection, or request is trusted by default. Every access attempt… --- ## [Where exactly is WorkMgr4 access role configured to allow user to perform other's assignments?](https://forums.pega.com/t/where-exactly-is-workmgr4-access-role-configured-to-allow-user-to-perform-others-assignments/4756)
**Author:** [@CloeW938](https://forums.pega.com/u/CloeW938)\ **Replies:** 7\ **Last updated:** [June 1, 2026, 11:21pm UTC](https://forums.pega.com/t/where-exactly-is-workmgr4-access-role-configured-to-allow-user-to-perform-others-assignments/4756 "2026-06-01T23:21:09Z")
Hello, When you create an application in UI-Kit, system creates two access roles - “Manager” and “User”. “Manager” access role inherits from PegaRULES:WorkMgr4 and “User” access role inherits from PegaRULES:User. The di… --- ## [PGP Encryption of documents in Pega - Solution](https://forums.pega.com/t/pgp-encryption-of-documents-in-pega-solution/4769)
**Author:** [@VishantC](https://forums.pega.com/u/VishantC)\ **Replies:** 31\ **Last updated:** [June 1, 2026, 6:49am UTC](https://forums.pega.com/t/pgp-encryption-of-documents-in-pega-solution/4769 "2026-06-01T06:49:17Z")
Hi All, we saw multiple people were looking for solution for implementing PGP encryption in Pega for documents. Hi All, if you are looking for solution of PGP(Preety Good Privacy) Encryption of documents(PDF, Word, XML… --- ## [I need to restrict a particular insight to a specific access group (as part of reports)](https://forums.pega.com/t/i-need-to-restrict-a-particular-insight-to-a-specific-access-group-as-part-of-reports/12107)
**Author:** [@VenkateshC17599704](https://forums.pega.com/u/VenkateshC17599704)\ **Replies:** 10\ **Last updated:** [May 26, 2026, 7:21am UTC](https://forums.pega.com/t/i-need-to-restrict-a-particular-insight-to-a-specific-access-group-as-part-of-reports/12107 "2026-05-26T07:21:46Z")
I need to restrict a particular insight to a specific access group (as part of reports). Req : I have more than five reports to created and those can be accessed only by manager role . nobody should not access them from… --- ## [Okta Authentication switch access group and workgroup](https://forums.pega.com/t/okta-authentication-switch-access-group-and-workgroup/11899)
**Author:** [@CraigA52](https://forums.pega.com/u/CraigA52)\ **Replies:** 9\ **Last updated:** [May 14, 2026, 6:42pm UTC](https://forums.pega.com/t/okta-authentication-switch-access-group-and-workgroup/11899 "2026-05-14T18:42:25Z")
Hi All, We have a need to switch a users access group, default workgroup and skill via Okta login depending on how they log in. There is obviously Pre-authentication and Post-authentication activity points. Is this po… --- ## [Accessing SSH Keys from HashiCorp / External Key Vaults using Pega Keystore](https://forums.pega.com/t/accessing-ssh-keys-from-hashicorp-external-key-vaults-using-pega-keystore/11703)
**Author:** [@Sudipta\_Bis](https://forums.pega.com/u/Sudipta_Bis)\ **Replies:** 1\ **Last updated:** [April 23, 2026, 11:20am UTC](https://forums.pega.com/t/accessing-ssh-keys-from-hashicorp-external-key-vaults-using-pega-keystore/11703 "2026-04-23T11:20:06Z")
Hi Pega Community, I’m looking for guidance and best practices around accessing SSH private keys stored in secure external key vaults (such as HashiCorp Vault) and using them in Pega, specifically for SFTP / SSH authent… --- ## [GPT-4-turbo API Integration Not Working in Pega](https://forums.pega.com/t/gpt-4-turbo-api-integration-not-working-in-pega/8331)
**Author:** [@Sampath\_Dwara](https://forums.pega.com/u/Sampath_Dwara)\ **Replies:** 1\ **Last updated:** [April 19, 2026, 2:54am UTC](https://forums.pega.com/t/gpt-4-turbo-api-integration-not-working-in-pega/8331 "2026-04-19T02:54:28Z")
Hello, I am experiencing an issue with the GPT-4-turbo model integration in my Pega application. The REST connector was configured using the correct OpenAI API endpoint (https://api.openai.com/v1/completions), and I am … --- ## [OAuth2 Client registration is not found for C11N Application](https://forums.pega.com/t/oauth2-client-registration-is-not-found-for-c11n-application/9113)
**Author:** [@Chunzhi\_Hong](https://forums.pega.com/u/Chunzhi_Hong)\ **Replies:** 1\ **Last updated:** [April 13, 2026, 3:25am UTC](https://forums.pega.com/t/oauth2-client-registration-is-not-found-for-c11n-application/9113 "2026-04-13T03:25:50Z")
When you migrate a new C11N app from one environment to another, you might face login issue which generate exceptions like below.. (root cause) Type com.pega.pegarules.pub.PRRuntimeException Message OAuth2 Client regis… --- ## [Show custom message when the work object is not searchable due to ABAC policy](https://forums.pega.com/t/show-custom-message-when-the-work-object-is-not-searchable-due-to-abac-policy/11096)
**Author:** [@Amit\_Goyal](https://forums.pega.com/u/Amit_Goyal)\ **Replies:** 3\ **Last updated:** [April 8, 2026, 8:38am UTC](https://forums.pega.com/t/show-custom-message-when-the-work-object-is-not-searchable-due-to-abac-policy/11096 "2026-04-08T08:38:35Z")
Hi All, I have a requirement to show a different message when due to ABAC policy the work object is not found in search, Currently the default message in both scenarios: 1)If WO doesn’t exist 2)If WO exists but not se… --- ## [Access Constellation case in traditional keep loggging out](https://forums.pega.com/t/access-constellation-case-in-traditional-keep-loggging-out/11179)
**Author:** [@MatheswaranRavi](https://forums.pega.com/u/MatheswaranRavi)\ **Replies:** 1\ **Last updated:** [March 31, 2026, 3:45pm UTC](https://forums.pega.com/t/access-constellation-case-in-traditional-keep-loggging-out/11179 "2026-03-31T15:45:51Z")
We have applied the Shared Case via Framework or Common App (Cleanest Architecture). to access the constellation cases (APP B) in traditional applicaiton (APP A) But - we could seee the repetitive log out and the re-lo… --- ## [Operator Disablement Policy Per application](https://forums.pega.com/t/operator-disablement-policy-per-application/11250)
**Author:** [@MOHANRAJS7274](https://forums.pega.com/u/MOHANRAJS7274)\ **Replies:** 2\ **Last updated:** [March 20, 2026, 9:45pm UTC](https://forums.pega.com/t/operator-disablement-policy-per-application/11250 "2026-03-20T21:45:39Z")
Hi - I have multiple active applications production and I want to set different operator disablement policy based on application user has access to. Currently I can see Security Policy tab is application agonistic. Is it… --- ## [Pega / Google Oauth 2.0](https://forums.pega.com/t/pega-google-oauth-2-0/6473)
**Author:** [@BachirAmazighB](https://forums.pega.com/u/BachirAmazighB)\ **Replies:** 3\ **Last updated:** [March 11, 2026, 8:38pm UTC](https://forums.pega.com/t/pega-google-oauth-2-0/6473 "2026-03-11T20:38:28Z")
Hello, i want to integrate google api’s and i have created an authentication profile(with credentials from google cloud ) The first connection is good but the refresh token does not work any idea? i saw this article h… --- ## [CLSA Community webinars content overview](https://forums.pega.com/t/clsa-community-webinars-content-overview/1072)
**Author:** [@DionLammers](https://forums.pega.com/u/DionLammers)\ **Replies:** 12\ **Last updated:** [March 10, 2026, 7:06am UTC](https://forums.pega.com/t/clsa-community-webinars-content-overview/1072 "2026-03-10T07:06:29Z")
In 2020 we have started with the CLSA community of practice and with that we have started to host meetups for the CLSA community where we can promote innovation and best practices with and between our most senior communi… [Next page](https://forums.pega.com/tag/security/35.md?match_all_tags=true&page=1&tags%5B%5D=security)