IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How to list dynamicall registered clients for an API definition?

    Posted Tue September 22, 2020 09:03 PM

    We are allowing specified users to register dynamic clients for various API Definitions. As an administrator, I would like to be able to view all dynamically registered clients, but I am having issues identifying how I can list all dynamic clients registered to a definition.

    I am able to to use this end point https://FQDN/mga/sps/oauth/oauth20/register/APIDefinitionname?client_id=c9TLWNKkzwAh2TCahx1V.

    This get call returns client information for a specific client. I would like to see a list of all dynamically registered clients.



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: How to list dynamicall registered clients for an API definition?

    Posted Thu September 24, 2020 03:25 PM

    There is not an API that will let you see a list of all of the dynamically registered clients. I suggest that you open a Request for Enhancement (RFE) and see if the development team can add something to allow this.

    RFE Link: https://www.ibm.com/developerworks/rfe/

    The dynamically registered clients are stored in the HVDB. If you are using an external database, you may be able to get the data that you want using SQL calls to the database. If you are using an internal database, this would not be possible.



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: How to list dynamicall registered clients for an API definition?

    Posted Thu September 24, 2020 07:45 PM

    I will open a request for enhancement, but I would like to find out if the information on Leo Farrell's blog will be updated? He has information on how to list out all the clients for an owner, which I was unable to get working or find documentation for 9.0.7.1 on how this works.

    Leo Farrell in June, 2018 published this article: https://www.ibm.com/blogs/security-identity-access/oauth-dynamic-client-registration/

    In this article, the information shows how to list dynamic clients owned by a user, but I was unable to find this in ISAM V9.0.7.1 documentation.

    Listing dynamic clients

    When retrieving a list of dynamic clients, a filter can be provided, to filter on the owning user or definition.

    Here is an example of listing all including a filter on the owner of the client, the uri /iam/access/v8/dynamic_clients uri appears to not be valid, so I tried using a uri /mga/sps/oauth/oauth20/register/dynamic_clients, with no luck.

    curl --user admin:admin -H 'Accept: application/json' https://lmi.appliance.ibm.com/iam/access/v8/dynamic_clients?filter=owner%20equals%20testuser HTTP/1.1 200 OK Pragma: no-cache Content-Type: application/json [ { "owner": "testuser", "clientId": "TbV2vjE4Iln7YD48lAe0", "definitionId": 1, "data": { "company_name": "Generic Corp", "registration_client_uri": "https://appliance.ibm.com/mga/sps/oauth/oauth20/register/testDef?client_id=TbV2vjE4Iln7YD48lAe0", "tos_uri": "https://application.ibm.com", "redirect_uris": [ "https://application.ibm.com/redirect" ], "client_id_issued_at": 1524629217, "client_secret": "vKSOfz1noK9gRmg5DK0Q", "client_name": "A dynamic client #1" } },

    Thanks,



    #Support
    #SupportMigration
    #Verify


  • 4.  RE: How to list dynamicall registered clients for an API definition?

    Posted Thu September 24, 2020 07:46 PM

    Also, can you please let me know what HVDB table to query for the information?



    #Support
    #SupportMigration
    #Verify


  • 5.  RE: How to list dynamicall registered clients for an API definition?

    Posted Thu October 01, 2020 02:38 PM

    The url posted in Leo Farrell's article does in fact list all the dynamically registered clients. My error, I should have tried the management ip interface instead of the application interface. A big miss on my part.



    #Support
    #SupportMigration
    #Verify