Use identity domain browser session authentication for hosted applications in OCI Generative AI

Identity domain browser session authentication, which adds OAuth 2.1 support for hosted deployments, is now generally available in OCI Generative AI.

Select Identity domain browser session when creating a hosted application to use the OAuth 2.1 Authorization Code flow with Proof Key for Code Exchange (PKCE). Browser users are redirected to an OCI identity domain to sign in. The hosted application service obtains an access token on their behalf and establishes a browser session that uses a session cookie.

Existing identity domain bearer token and OCI IAM authentication remain supported. To change an application's authentication type, select Edit on its detail page. Associated hosted deployments use the application's authentication settings.

For an overview, see Authentication. For configuration steps, see Creating an Application.