DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  OAuth and DataPower

    Posted Fri December 15, 2023 04:55 PM

    Can AAA policy of DataPower be used for authenticating a client? 

    Identification section of AAA has the OAuth option, however on the next section of AAA, 'Define how to authenticate the user.', which option to use for OAuth? Thanks 



    ------------------------------
    A Khan
    ------------------------------


  • 2.  RE: OAuth and DataPower

    Posted Mon December 25, 2023 07:51 AM

    This may help.

    https://blogs.perficient.com/2016/03/17/oauth-implementation-in-datapower-x152/



    ------------------------------
    Sunil Chaurasia
    ------------------------------



  • 3.  RE: OAuth and DataPower

    Posted Sun December 31, 2023 07:50 AM

    It provided you authenticate OAuth Client

    https://www.ibm.com/support/pages/grant-type-scenario-client-credentials.



    ------------------------------
    Asif S EAI Consultant
    ------------------------------



  • 4.  RE: OAuth and DataPower

    Posted Fri January 05, 2024 11:53 AM
    Edited by Asim Khan Fri January 05, 2024 03:27 PM

    Looks like authentication is happening against the 'OAuth Client Group'. I am able to get the access token from 'Web Token Service'.

    Do you know what the steps are involved for access token creation such as encrypt + base64 encode. I am asking as I am interested to open the token and see its content. I tried decryption the access token using the same secret shared key how ever getting "Data decryption failed: *NULL decryption result*'. 



    ------------------------------
    A Khan
    ------------------------------