IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Simple oidc implementation

    Posted Fri August 02, 2024 04:18 PM

    We want to use ibm security verify on a simple web app. We want Verify login page to be shown. And when user logins, we receive a request through callback url we provide, só can get access token. We have implemented this easily with IBM AppId. How to implement with Verify? Where are the sdks? Where are the step by step guide for this fairly common scenario?



    ------------------------------
    Joba Diniz
    Product Manager
    IBM
    ------------------------------


  • 2.  RE: Simple oidc implementation

    Posted Fri August 02, 2024 05:18 PM

    Hello Joba,

    I used terms 'simple oidc application ibm security verify' in the search engine 'Google' and was able to find the following:
    https://docs.verify.ibm.com/gateway/docs/tasks-oidc-rp-verify

    So that sets up OIDC using IBM Verify and the IBM Application Gateway container as a Reverse Proxy in front of an application.

    IBM Verify is OIDC compliant which means that as long as you have an SDK or library that is OIDC Compliant it can be used with IBM Verify.

    The second result was the following:
    https://www.ibm.com/docs/en/security-verify?topic=ss-configuring-openid-connect-single-sign-in-custom-application


    It describes how to create a 'Custom Application' in the IBM Verify portal and set it up for OIDC 1.0.

    The following did not show up in the results but is a resource available publicly. IBM Security has many assets on Github that are helpful for using our products:
    https://github.com/orgs/IBM-Security/repositories

    The following specific repository is our JavaScript SDK for using IBM Verify:
    https://github.com/IBM-Security/verify-sdk-javascript

    And the following is an OIDC Sample Application:
    https://github.com/IBM-Security/CI-OIDC-Sample

    I'd suggest that you bookmark the IBM Security Github repositories as they are very useful for the IBM Verify suite.

    Hopefully this will get you started and provides information for you to be able to implement this fairly common scenario.



    ------------------------------
    JACK YARBOROUGH
    ------------------------------



  • 3.  RE: Simple oidc implementation

    Posted Fri August 02, 2024 05:36 PM

    With ibm AppId I don't need to implement anything other than calling the sdk (or apis). I don't want to host or create proxies. I want a cloud service that provides me identity and authentication management. According to best practices I should use IBM Verify instead of AppId, but Verify is not straightforward to configure default settings 



    ------------------------------
    Joba Diniz
    Product Manager
    IBM
    ------------------------------



  • 4.  RE: Simple oidc implementation

    Posted Fri August 02, 2024 06:58 PM

    Hello Joba,

    Here are learning resources so the platform won't be as difficult for you to understand:

    https://www.ibm.com/training/course/ibm-verify-saas-quickstart-SLA4724 - ISV Quickstart

    https://www.ibm.com/training/course/developing-with-verify-saas-SLA5324 - Developing with ISV

    These are two out of approximately 100 videos that have to do with the Verify platform.

    Here is the search on the IBM Training site that included these results:

    https://www.ibm.com/training/search?query=Verify%20OR%20Access%20Manager%20OR%20Access%20Management%20OR%20Verify%20Cloud%20OR%20Verify%20SaaS&mktgCategory=Security

    Between all this training, the cookbooks, and a bit of time you should be able to use IBM Verify to authenticate to your applications.



    ------------------------------
    JACK YARBOROUGH
    ------------------------------