API Connect

 View Only
Expand all | Collapse all

solution to move existing consumer orgs, apps to another provider organization

  • 1.  solution to move existing consumer orgs, apps to another provider organization

    Posted Sun January 26, 2025 01:17 AM

    Hello Everyone,

    Is there any solution to move  existing consumer organization, applications to another provider organization? Appreciate any Insights, Thank you.



    ------------------------------
    Kumar
    ------------------------------


  • 2.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 30 days ago

    Hello All,

    Can anyone please help me with your Inputs?



    ------------------------------
    Kumar
    ------------------------------



  • 3.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 30 days ago

    Hi Kumar,

    Can you explain in detail? Applications may have subscriptions. Do you want to move entire catalog data to another provider organization?



    ------------------------------
    Nirmalan
    ------------------------------



  • 4.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 30 days ago

    Hi,

    one way of doing this is via the API Connect Rest Api's.
    Use them to fetch the current config and to push it to the new pOrg.

    see https://www.ibm.com/docs/en/api-connect/10.0.8?topic=information-api-connect-rest-apis



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 5.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago

    Dear Jeroen,

    We are on APIC v10.0.5.7. Can we push the consumer configuration from one pOrg to another pOrg through REST APIs in v10.0.5.7?



    ------------------------------
    Kumar
    ------------------------------



  • 6.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago

    yes



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 7.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago
    Edited by Kumar . 29 days ago

    Hello Jeroen,

    Could you please share the REST API Object name or the endpoint?

    I was checking in the portal rest api postman collection which is available over internet but not able to find the correct API which will move cOrg, cApp from one pOrg to another pOrg.
    ------------------------------
    Kumar
    ------------------------------



  • 8.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago

    Hi Kumar,

    If you use the Config Sync tool then all the API calls you need are already selected and configured.

    Here are the Config Sync tool docs: https://www.ibm.com/docs/en/api-connect/10.0.8?topic=imac-using-config-sync-replicate-consumer-side-catalog-data



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------



  • 9.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago

    There is no single API call you can make that magically moves everything.
    Your choices are to either use config-sync or to make the required API calls to get the objects from one catalog/org and then make the API calls to create them in the new one.

    You could write scripts to loop through whatever you needed. Or use config-sync.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 10.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 29 days ago

    Have a look at config-sync, you should find it in the 10.0.8 documentation.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 11.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 15 days ago

    Dear Chris,

    I have retrieved all the users and their respective consumer organizations from one provider organization. Now, I am working on writing a script to push (create with the same information) all these users and consumer organizations into another organization.

    However, for consumer applications and their credentials, we are considering keeping the same client credentials for consumer applications in the new organization as well. This way, end users won't need to change the client ID on their end.

    However, we are unsure if we can have same client credentials in another provider organization or not. Could you confirm if we can achieve?



    ------------------------------
    Kumar
    ------------------------------



  • 12.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 15 days ago

    Hiya,

    yes that's possible. You can provide the old client id and secret (I assume you know it from somewhere else because you can't export secrets from apic as they're only stored as one way hashes) to the credentials reset operation and it will then use those values not create new ones.

    Can I recommend looking into config-sync to synchronise the consumer artifacts?



    ------------------------------
    Chris Dudley
    ------------------------------



  • 13.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 14 days ago

    Hello Chris,

    Can we have config-sync for the APIC version 10.0.5.7, which is on the .OVA platform? If yes, sure we will use it.



    ------------------------------
    Kumar
    ------------------------------



  • 14.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 3 days ago
    Edited by Kumar . 3 days ago

    @Chris Dudley

    Using the reset credentials feature in the dev portal, I provided the credentials of one consumer(still this is existed and subscribed apis) to another newly created consumer in a different provider organization. However, it is not accepting the credentials I provided. Could you explain why this is happening and how to fix it?



    ------------------------------
    Kumar
    ------------------------------



  • 15.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 3 days ago

    The developer portal does not allow you to provide the credentials as part of the reset function, you can only do that via the REST API or CLI.

    "It is not accepting" ? what does that mean? If you're getting an error, what is it? Is there anything in the log ?

    The consumer API can only be called by consumers - it will not accept API Manager credentials, to use those you'd need to use the provider API, which also has operations for resetting consumer credentials.

    What are you actually trying to achieve ? What steps are you following and what is happening? What version of APIC are you using (specifically, including fixpack)?

    Its very hard to help if you don't provide any information.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 16.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 3 days ago
    Edited by Kumar . 3 days ago

    Dear Chris,

    1)What version of APIC are you using (specifically, including fixpack)?

    v10.0.5.7 (OVA, VM)

    Can we have config-sync for the APIC version 10.0.5.7, which is on the .OVA platform? If yes, sure we will use it.


    2)What are you actually trying to achieve ?

    We have to move all the cOrgs, cApps from one pOrg1 to the another pOrg2 due to our requirements.  Using batch script we created all the cOrgs, cApps in the P2 with the same information of the cOrgs, cApps which ahs been created in P1.  

    Now we want to match the same client credentials for consumer applications in the both pOrg1 and pOrg2. 

    3) What steps are you following and what is happening?


    As you told, using the below one I could be able to update the cApp credentials to match with pOrg1. Here, we passed client id and secret of the cApp from pOrg1 and updated the credentials of cApp in pOrg2.

    curl --location --request PATCH 

    https://stg-consumer/consumer-api/apps/reset-credentials/resetapp/credentials/Credential-for-resetAPP-0' \


    --header 'Content-Type: application/json' \
    --header 'Accept: application/json' \
    --header 'X-IBM-Consumer-Context: pOrg.catalog' \
    --header 'Authorization: Bearer ' \
    --data '{
      "type": "credential",
      "client_id": "",
      "client_secret": ""

      }'

     



    ------------------------------
    Kumar
    ------------------------------



  • 17.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 3 days ago

    Yes I think config-sync supports 10.0.5 but you'd need to check the docs. If it doesn't then you need to be upgrading to 10.0.8 soon anyway as fix support ends for 10.0.5 in June.

    Thats a consumer api call, you can only use that if you are the consumer and have logged in as them. I doubt that's what you ant to do.

    Use the provider API instead, it also has operations to set the consumer application credentials.

    The APis are named based on who can use them not the assets it acts on. If you're logging in (getting an api token) using api manager credentials you need to use the provider api. You can only use the consumer api as the consumer themselves (dev portal username / password).



    ------------------------------
    Chris Dudley
    ------------------------------



  • 18.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted 30 days ago
    Edited by Nick Cawood 30 days ago

    IBM now offers the Config Sync tool to migrate Consumer side content:

    https://www.ibm.com/docs/en/api-connect/10.0.8?topic=imac-using-config-sync-replicate-consumer-side-catalog-data

    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------