How to create a group

Introduction

A group is needed both for data sources and for applications. You create a group in the developer portal. You have to input a unique name for the group and then input the party configuration domain where you hosted a party configuration you set up. In case you have an existing group without a party configuration you can find the group in your list of groups, edit it, add the party configuration domain and click the update button.

Creating and hosting party configuration

1. Select a domain (it can also be a subdomain) on which you want to host your party configuration.
Note: You will need to be able to create a file at "/.well-known/dataspace/party-configuration.json" on that domain and it needs to be accessible over "https://" with a valid certificate.

2. Create the party-configuration.json and host it on the desired domain. See https://well-known-docs.testbed.fi/party-configuration.html for more details.

3. Ensure the jwks_uri points to some "https://" based domain and a location you can control. A suggestion is to point it to the /.well-known/jwks.json on the same domain as the party configuration.
Example from https://ioxio.com/.well-known/dataspace/party-configuration.json:

{
  "jwks_uri": "https://ioxio.com/.well-known/jwks.json"
}

4. Create the content for the jwks_uri and host it in the location you specified in the party configuration. For this, you will need to generate an RSA public/private keypair. Ensure there is at least one key and that it has a kid, kty is RSA , use is set to sig, alg is RS256 and it has the n and e parameters. Here is an example of what it should look like from https://ioxio.com/.well-known/jwks.json:

{
  "keys": [
    {
      "kid": "302feac8851574f3ef74ec1c62a7489f",
      "kty": "RSA",
      "use": "sig",
      "alg": "RS256",
      "n": "wO_R-_1EUodohCn9mIf3lxH70IFDLIsSbSLg3rNbKJIexFlxE8X72_gFGwMoZJqbeNfEDcPI9UiSXM6H9z_bpfVF7jxtvvyCqSmy-R5miadGoiiYUZpRvK-nxyjOiXlobsaPOgXiC3tCwxZ4EfXznzu5WZm2ekSeIf9nj-NKuPNuUpfCLH6Jbfq7PzWq5BMnmjEwz_VXqqk58mkqgFwr_0BRh2I2i5ufHTixyUGV7u7NK1WkkeIF4VbQILpO0t5-yxO6by2r3A_pubjSUmy8F5FSqqWkxNOfv5svFLnbCTvFuXVonjMqs6MD4BFVjRRhSI9NDWfjTisy-EKNpmWtbM0WAqk2hwey-dE8Fd0B7FmR9GmWt8oR5-LN3QgoRa8_z-h0dYhSWi6vV7dBJxHtyFFVJSTHw3xwCpg6PdeuB8OxqlSuLxry5tMVGNv9humih_92tPbAOq3luAuUuVKmxEgZ-_bk3y9Gxo2YutFfTI8QcaBEyqiao040NIJiNJ0z0OiBodalGny-sHL51Y7iB_z8TYIs8aie_WDfpXRg5IP5UbZ3Onl84IIrH3RbsM2p889-qEpMRXJJY5pQVjur3LIlx2TQ3ir7nBqGYC_5JAeq0sDFonvFGGTfWA_e_QDLKth9Dz2-HPVCUqBsdyF2Es7Ot1ijBV9rVKiaGUtx67M",
      "e": "AQAB"
    }
  ]
}