opidClient.xml

<server description="opidClient">
 <!-- Enable features -->
 <featureManager>
  <feature>openidConnectClient-1.0</feature>
 </featureManager>

 <authFilter id="ATSAuthFilter">
   <requestUrl  id="ATSDemoUrl"
     name="ATSRefererUri" matchType="contains"
        urlPattern="/cscvinc/employee" />
 </authFilter>

 <!-- Define OIDC Client called ATS -->
 <openidConnectClient id="ATS"
      httpsRequired="true"
      authFilterRef="ATSAuthFilter"
      inboundPropagation="required"
      audiences="myZcee"
      issuerIdentifier="https://wg31.washington.ibm.com:26213/oidc/endpoint/OP"
      signatureAlgorithm="RS256"
      userIdentityToCreateSubject="sub"
      trustAliasName="JWT-Signer-Certificate"
      trustStoreRef="jwtTrustStore"
      authnSessionDisabled="true"
      disableLtpaCookie="true">
  </openidConnectClient>

 <keyStore fileBased="false" id="jwtTrustStore"
     location="safkeyring:///JWT.KeyRing"
      password="password" readOnly="true" type="JCERACFKS"/>

</server>