title: WSO2 Identity Server port configuration
body: <p>I'm using WSO2 Identity Server 5.10.0. I have a very classical scenario represented in this image
  <a href="https://i.stack.imgur.com/0SVGl.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/0SVGl.png" alt="enter image description here"></a></p>
  
  <p>Basically I have on the DMZ an Apache Web Server responding in SSL on port 443; in the secure zone i have my WSO2 IS server responding on port 9443. I need to support OAuth Open ID authentication (but I have the same issue in the SAML case).</p>
  
  <p>I configured my <code>deployment.toml</code> file in this way:</p>
  
  <pre><code>[server]
  hostname = "IAM01"
  node_ip = "10.xxxx.yyyy.zzzz"
  base_path = "https://$ref{server.hostname}:${carbon.management.port}"
  </code></pre>
  
  <p>Now when I make a call to the URL <code>https://mydomain/oauth2/token/.well-known/openid-configuration</code> in order to get all the OAuth information, the request is passed to the Web Server and from the Web Server to WSO2. The full WSO2 JSON response is <a href="https://pastebin.com/f1yNDeB0" rel="nofollow noreferrer">here</a> </p>
  
  <p>As you can see, in this JSON WSO2 responds to me by giving this kind of URLs: <code>https://IAM01:9443/oauth2/authorize</code>. This because in my <code>deployment.toml</code> I told him these paramaters. Sure I can change the hostname in mydomain but it remains the port problem. In fact my clients will fail on matching oauth issuer because they check for an issuer without port. What I would like to do is to configure WSO2 IS in order to tell him to generate all tokens information by using my specification and I con't want to run WSO2 IS server on port 443 (as root user moreover).
  I tried to configure the resident identity provider by using its interface as showed in the following <a href="https://i.stack.imgur.com/HCvn0.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/HCvn0.png" alt="image"></a> </p>
  
  <p>Also in this way I can't tell WSO2 to generate all the information by using just the <code>https://mydomain/</code> without adding port and other stuffs.</p>
  
  <p>How can I make this configuration? Moreover, for security policies, I can't run WSO2 IS on port 443.</p>
  
  <p>Thank you</p>
  
  <p>Angelo</p>