The documentation for OpenTokenCredentials shows code samples of how to pass a Bearer token to the FileNet API
https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=authentication-v559-later-single-sign-integrations-via-content-engine-api-bearer-token
If your FileNet client runs on WebSphere and authenticates with an OIDC Identity Provider, then the FileNet Content Engine API is able to look at the WebSphere JAAS subject to extract the OIDC access_token or id_token to send on FileNet API requests for SSO if the following JVM argument is set on the FileNet client
-Dcom.filenet.authentication.wsi.AutoDetectAuthToken=true
See this link for additional details
https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=SSNW2F_5.5.0/com.ibm.p8.ce.dev.ce.doc/ssotokenssetup.html
------------------------------
ROGER Bacalzo
------------------------------
Original Message:
Sent: Thu April 10, 2025 05:17 PM
From: Krishna Vaddireddy
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
Hello @ROGER Bacalzo We are looking at this approach to use in our applications. Do we have any samples on github on using SSO in IBM FileNet API?
------------------------------
Krishna
Original Message:
Sent: Thu October 12, 2023 01:28 PM
From: ROGER Bacalzo
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
Unfortunately, the OpenTokenCredentials API does not yet work properly with the PE API to get a VWSession. That is being worked on and will be available in a future release.
------------------------------
ROGER Bacalzo
Original Message:
Sent: Tue October 10, 2023 04:48 AM
From: Mahmoud Saleh
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
Hi ROGER, is there any sample code to get a VWSession with OpenTokenCredentials ?
------------------------------
Mahmoud Saleh
Original Message:
Sent: Wed August 30, 2023 11:55 AM
From: ROGER Bacalzo
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
The OpenTokenCredentials API is available only in CPE 5.5.9 and later. Here are some documentation links on how to use it:
- Single sign-on integrations via Content Engine API Bearer Token Authentication
- https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=authentication-v559-later-single-sign-integrations-via-content-engine-api-bearer-token
- Credentials Java API
- https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=comfilenetapiauthentication-credentials
- OpenTokenCredentials Java API
- https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=comfilenetapiauthentication-opentokencredentials
- Credentials .NET API
- https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=namespace-credentials-class
- OpenTokenCredentials .NET API
- https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=namespace-opentokencredentials-class
------------------------------
ROGER Bacalzo
Original Message:
Sent: Wed August 30, 2023 11:02 AM
From: Ahmed Alsareti
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
Hi ROGER,
does OpenTokenCredentials supported on 5.5.8?
can you provide please java sample code how to authentication using OpenTokenCredentials ?
our current environment:
FN 5.5.8
WAS 9.0.5.11
------------------------------
Ahmed
alssarty@yahoo.com
Original Message:
Sent: Thu September 08, 2022 01:49 PM
From: ROGER Bacalzo
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
The CPE WebSphere server has to be configured to accept OAuth/OIDC tokens. If your CPE server is running on traditional WebSphere, here are a couple of blog posts that describe how to set up OIDC on traditional WebSphere for CPE
How to Configure LTPA/OAuth/OIDC SSO with FileNet ICN, CS GraphQL, and CPE on WebSphere ND Application Server
https://community.ibm.com/community/user/automation/blogs/roger-bacalzo1/2021/05/28/how-to-configure-sso-with-fncm-on-websphere-nd
How to Configure LTPA/OAuth/OIDC SSO with FileNet ICN, CS GraphQL, and CPE on WebSphere traditional application server
https://community.ibm.com/community/user/automation/blogs/roger-bacalzo1/2020/12/17/how-to-configure-sso-between-icn-and-cpe
The new OpenTokenCredentials API is also available for C# CPE clients. Here's sample code on how to use it.
// Set connection parameters; substitute for the placeholders.
String uri = "https://<hostname>:<portnumber>/wsi/FNCEWS40MTOM/";
String username = "<username>"
String authToken = "<authToken>" // Client application method to obtain OAuth or OIDC SSO token
// Get client context.
IConnection conn = Factory.Connection.GetConnection(uri);
OpenTokenCredentials creds = new OpenTokenCredentials(username, authToken, null);
ClientContext.SetProcessCredentials(creds);
// Get default domain.
IDomain domain = Factory.Domain.FetchInstance(conn, null, null);
Debug.WriteLine("Domain: " + domain.Name);
------------------------------
ROGER Bacalzo
Original Message:
Sent: Wed September 07, 2022 03:40 AM
From: amit bagusetty
Subject: FileNet API SSO using OIDC procedure in FileNet 5.5.9
Hi,
Recently from 5.5.9, FileNet has support for API SSO using OIDC. I have a couple of queries regarding this.
1) Is there any additional configuration to be done at WebSphere level to achieve this ?
2) The sample mentioned in the Knowledge center is only for Java. Is there any available sample we can use for C# or ASp.Net ?
Thanks and Regards,
Amit
------------------------------
amit bagusetty
------------------------------