Hi Team

I want to configure and connect ADFS with my FileNetEngine so i can use authenticate to FileNetEngine using API Bearer without using the technical user.
            // Create instance of class used to pass OAuth token to WSI requests using CE API
          OpenTokenCredentials otc = new OpenTokenCredentials(username, authToken, null);

Does anyone did this approach before if so how ? 

thank you for your help

See this documentation link on using the OpenTokenCredentials API

https://www.ibm.com/docs/en/filenet-p8-platform/5.6.0?topic=authentication-single-sign-integrations-via-content-engine-api-bearer-token

You are responsible for obtaining the OAuth access_token or id_token in your application code.  Consult ADFS documentation on how to obtain this token for your logged in user.  Once you have this token, you pass it along with the username of the logged in user to the OpenTokenCredentials API.  Then execute your FileNet API operations as shown in that documentation link.

Thank you ROGER,

I followed the documentation but when i attempted the process, i encountered the following error :
FNRCE0040E: E_NOT_AUTHENTICATED

it seems i may need to adjust my configuration in WebSphere. Do you have any documentation on how to configure ADFS with IBM WebSphere so that FileNet can validate the token ? 

Thank you for your help,

Hi Fred,

If your FileNetEngine is running on traditional WebSphere, then you will need to configure it for OIDC authentication.  See one of these blogs on instructions to do this:

• How to Configure LTPA/OAuth/OIDC SSO with FileNet ICN, CS GraphQL, and CPE on WebSphere ND Application Server
  • https://community.ibm.com/community/user/automation/blogs/roger-bacalzo1/2021/05/28/how-to-configure-sso-with-fncm-on-websphere-nd

• How to Configure LTPA/OAuth/OIDC SSO with FileNet ICN, CS GraphQL, and CPE on WebSphere traditional application server

  • https://community.ibm.com/community/user/automation/blogs/roger-bacalzo1/2020/12/17/how-to-configure-sso-between-icn-and-cpe