API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

solution to move existing consumer orgs, apps to another provider organization

  • 1.  solution to move existing consumer orgs, apps to another provider organization

    Posted Sun January 26, 2025 01:17 AM

    Hello Everyone,

    Is there any solution to move  existing consumer organization, applications to another provider organization? Appreciate any Insights, Thank you.



    ------------------------------
    Kumar
    ------------------------------


  • 2.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon January 27, 2025 03:41 AM

    Hello All,

    Can anyone please help me with your Inputs?



    ------------------------------
    Kumar
    ------------------------------



  • 3.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon January 27, 2025 04:43 AM

    Hi Kumar,

    Can you explain in detail? Applications may have subscriptions. Do you want to move entire catalog data to another provider organization?



    ------------------------------
    Nirmalan
    ------------------------------



  • 4.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon January 27, 2025 04:47 AM

    Hi,

    one way of doing this is via the API Connect Rest Api's.
    Use them to fetch the current config and to push it to the new pOrg.

    see https://www.ibm.com/docs/en/api-connect/10.0.8?topic=information-api-connect-rest-apis



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 5.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 01:25 AM

    Dear Jeroen,

    We are on APIC v10.0.5.7. Can we push the consumer configuration from one pOrg to another pOrg through REST APIs in v10.0.5.7?



    ------------------------------
    Kumar
    ------------------------------



  • 6.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 03:18 AM

    yes



    ------------------------------
    Jeroen Willems
    Integration Architect - Managing Partner
    Integration Designers
    ------------------------------



  • 7.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 08:48 AM
    Edited by Kumar . Tue January 28, 2025 08:49 AM

    Hello Jeroen,

    Could you please share the REST API Object name or the endpoint?

    I was checking in the portal rest api postman collection which is available over internet but not able to find the correct API which will move cOrg, cApp from one pOrg to another pOrg.
    ------------------------------
    Kumar
    ------------------------------



  • 8.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 08:59 AM

    Hi Kumar,

    If you use the Config Sync tool then all the API calls you need are already selected and configured.

    Here are the Config Sync tool docs: https://www.ibm.com/docs/en/api-connect/10.0.8?topic=imac-using-config-sync-replicate-consumer-side-catalog-data



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------



  • 9.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 09:31 AM

    There is no single API call you can make that magically moves everything.
    Your choices are to either use config-sync or to make the required API calls to get the objects from one catalog/org and then make the API calls to create them in the new one.

    You could write scripts to loop through whatever you needed. Or use config-sync.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 10.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Tue January 28, 2025 01:42 AM

    Have a look at config-sync, you should find it in the 10.0.8 documentation.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 11.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon February 10, 2025 01:37 PM

    Dear Chris,

    I have retrieved all the users and their respective consumer organizations from one provider organization. Now, I am working on writing a script to push (create with the same information) all these users and consumer organizations into another organization.

    However, for consumer applications and their credentials, we are considering keeping the same client credentials for consumer applications in the new organization as well. This way, end users won't need to change the client ID on their end.

    However, we are unsure if we can have same client credentials in another provider organization or not. Could you confirm if we can achieve?



    ------------------------------
    Kumar
    ------------------------------



  • 12.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon February 10, 2025 03:02 PM

    Hiya,

    yes that's possible. You can provide the old client id and secret (I assume you know it from somewhere else because you can't export secrets from apic as they're only stored as one way hashes) to the credentials reset operation and it will then use those values not create new ones.

    Can I recommend looking into config-sync to synchronise the consumer artifacts?



    ------------------------------
    Chris Dudley
    ------------------------------



  • 13.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Wed February 12, 2025 04:22 AM

    Hello Chris,

    Can we have config-sync for the APIC version 10.0.5.7, which is on the .OVA platform? If yes, sure we will use it.



    ------------------------------
    Kumar
    ------------------------------



  • 14.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Sun February 23, 2025 03:40 AM
    Edited by Kumar . Sun February 23, 2025 03:42 AM

    @Chris Dudley

    Using the reset credentials feature in the dev portal, I provided the credentials of one consumer(still this is existed and subscribed apis) to another newly created consumer in a different provider organization. However, it is not accepting the credentials I provided. Could you explain why this is happening and how to fix it?



    ------------------------------
    Kumar
    ------------------------------



  • 15.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Sun February 23, 2025 07:04 AM

    The developer portal does not allow you to provide the credentials as part of the reset function, you can only do that via the REST API or CLI.

    "It is not accepting" ? what does that mean? If you're getting an error, what is it? Is there anything in the log ?

    The consumer API can only be called by consumers - it will not accept API Manager credentials, to use those you'd need to use the provider API, which also has operations for resetting consumer credentials.

    What are you actually trying to achieve ? What steps are you following and what is happening? What version of APIC are you using (specifically, including fixpack)?

    Its very hard to help if you don't provide any information.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 16.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Sun February 23, 2025 10:43 AM
    Edited by Kumar . Sun February 23, 2025 10:45 AM

    Dear Chris,

    1)What version of APIC are you using (specifically, including fixpack)?

    v10.0.5.7 (OVA, VM)

    Can we have config-sync for the APIC version 10.0.5.7, which is on the .OVA platform? If yes, sure we will use it.


    2)What are you actually trying to achieve ?

    We have to move all the cOrgs, cApps from one pOrg1 to the another pOrg2 due to our requirements.  Using batch script we created all the cOrgs, cApps in the P2 with the same information of the cOrgs, cApps which ahs been created in P1.  

    Now we want to match the same client credentials for consumer applications in the both pOrg1 and pOrg2. 

    3) What steps are you following and what is happening?


    As you told, using the below one I could be able to update the cApp credentials to match with pOrg1. Here, we passed client id and secret of the cApp from pOrg1 and updated the credentials of cApp in pOrg2.

    curl --location --request PATCH 

    https://stg-consumer/consumer-api/apps/reset-credentials/resetapp/credentials/Credential-for-resetAPP-0' \


    --header 'Content-Type: application/json' \
    --header 'Accept: application/json' \
    --header 'X-IBM-Consumer-Context: pOrg.catalog' \
    --header 'Authorization: Bearer ' \
    --data '{
      "type": "credential",
      "client_id": "",
      "client_secret": ""

      }'

     



    ------------------------------
    Kumar
    ------------------------------



  • 17.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Sun February 23, 2025 12:08 PM

    Yes I think config-sync supports 10.0.5 but you'd need to check the docs. If it doesn't then you need to be upgrading to 10.0.8 soon anyway as fix support ends for 10.0.5 in June.

    Thats a consumer api call, you can only use that if you are the consumer and have logged in as them. I doubt that's what you ant to do.

    Use the provider API instead, it also has operations to set the consumer application credentials.

    The APis are named based on who can use them not the assets it acts on. If you're logging in (getting an api token) using api manager credentials you need to use the provider api. You can only use the consumer api as the consumer themselves (dev portal username / password).



    ------------------------------
    Chris Dudley
    ------------------------------



  • 18.  RE: solution to move existing consumer orgs, apps to another provider organization

    Posted Mon January 27, 2025 05:59 AM
    Edited by Nick Cawood Mon January 27, 2025 06:11 AM

    IBM now offers the Config Sync tool to migrate Consumer side content:

    https://www.ibm.com/docs/en/api-connect/10.0.8?topic=imac-using-config-sync-replicate-consumer-side-catalog-data

    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------