watsonx Orchestrate

 View Only

 Accessing another IBM service vie IAM API Key

Rachmad Ramadhani's profile image
Rachmad Ramadhani posted Thu November 13, 2025 06:11 AM

Hey everyone,

i am looking for a way to connect some IBM services to watsonx Orchestrate through custom python tool. The services support authentication through https://iam.cloud.ibm.com/identity/token using urn:ibm:params:oauth:grant-type:apikey as grant type. At the moment, i cannot create an OAuth connection using this kind of grant type in the UI, because the UI forced me to fill client ID and client secret and if i fill them(along with API key as an extra field), the authentication itself will fail because the authentication endpoint prioritize the fields for client ID and client secret(No credential found error on connect) instead of the grant type. I haven't tested creating it using ADK yet. Is there a better way to do this?

I would like to use something similiar, because from what i assumed, the OAuth connection will cache the retrieved access token first, and reuse it, in the tool, i can get the access token directly. I can use key pair connection, and then implement the authentication inside the tool itself, but then it will do the whole authentication every time the tool is triggered(or per session if the flow is optimized, but it will be implementation specific).