What product/components do you use and which version/fix level are you on?

webMethods API Gateway

Is your question related to the free trial, or to a production (customer) instance?

Production (customer) instance

What are you trying to achieve? Please describe it in detail.

I was trying to apply 2 Authentication in API Gateway for the same API.
In the below diagram, Use Case 1 - Customer will call the API and it is using JWT Validation in API Gateway.
In Use Case 2, it is a batch job process to API through webmethod API Gateway.

image1298×538 11 KB

According to the document, it is supporting the ‘OR’ Condition.
But it seems it would throw an error for the mTLS-only case.
Please advise

Do you get any error messages? Please provide a full error message screenshot and log file.

Have you installed all the latest fixes for the products and systems you are using?

Hi Michael,
I have few questions on the use case. Are you trying to use JWT OR SSL cert as authentication? Also have you set up any applications?

Please share the error you are receiving when you are trying SSL only.

Regards.

Are you trying to use JWT OR SSL cert as authentication? <— I was trying to 2 Authentication.
1 is JWT and the other is SSL Cert.
Because JWT one is a request coming from a user.
SSL Cert is a Backend Schedule Job to call into the same API.

I didn’t have an error yet but want to understand if this setup is technically feasible or not.

Hi Michael,
This is possible if you use condition type OR in Identify & Authorize policy.

Regards.

hi @Prabaa

still have 2 questions:

https://higherlogicdownload.s3.amazonaws.com/IMWUC/webMethods/Files3/60daa0a3a4b140854ea9b16bf8f98f8d980d955b_2_1035x592.png 1.5x, https://higherlogicdownload.s3.amazonaws.com/IMWUC/webMethods/Files3/60daa0a3a4b140854ea9b16bf8f98f8d980d955b_2_1380x790.png 2x" data-dominant-color="F6EDEE">

image1583×907 121 KB

1st Problem:
If I have 2 different JWT Validation on the same API, how to config this setup?
The right panel only allows select one of them.

2nd Problem:
Tried to add one more “Identify & Authorize Application”, but it doesn’t allow me to add it.
For 2 JWT Validation Cases, should I add one more “Identify & Authorize Application”?

HI @Prabaa

sorry, still have a questions on this

https://higherlogicdownload.s3.amazonaws.com/IMWUC/webMethods/Files3/60daa0a3a4b140854ea9b16bf8f98f8d980d955b_2_1035x592.png 1.5x, https://higherlogicdownload.s3.amazonaws.com/IMWUC/webMethods/Files3/60daa0a3a4b140854ea9b16bf8f98f8d980d955b_2_1380x790.png 2x" data-dominant-color="F6EDEE">

image1583×907 121 KB

If I have to support 2 different JWT Validation on the same API, how to config it from the panel?
For example the same API for Customer and Staff Access. They will have two different AuthN.
In (2), it is only allowed to select 1 JWT.
and not allowed me to add one more “Identity and Authorize Application” (3).
Not sure if the correct way to make it support 2 JWT Validation is.
Thank you

you can apply 2 different Authentications into API Gateway for same API Endpoint.
I thought 2 same Authentications is not possible.

Thank you. will try