# External jwt signer

**URL:** <https://openziti.discourse.group/t/external-jwt-signer/722>\
**Category:** General Questions\
**Created:** [August 30, 2022, 5:21pm UTC](https://openziti.discourse.group/t/external-jwt-signer/722 "2022-08-30T17:21:37Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![av-dev](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@av-dev](https://openziti.discourse.group/u/av-dev)\
**Post date:** [August 31, 2022, 2:39pm UTC](https://openziti.discourse.group/t/external-jwt-signer/722/3 "2022-08-31T14:39:02Z")

</div>

This is sort of continuation of my question from [the other post](https://openziti.discourse.group/t/ziti-cli-user-question/713)

I get identity from internal CA, I can use that identity to request a oidc access token from my CA. If I could use that for enrolling router ( where controller verifies the token with my CA as oidc provider ), I was thinking I could avoid doing “ziti edge login …” for router enrollment.

---

_[View the full topic](https://openziti.discourse.group/t/external-jwt-signer/722)._