webMethods

webMethods

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Configuring Basic Authentication and LDAP in API Gateway

  • 1.  Configuring Basic Authentication and LDAP in API Gateway

    Posted Tue August 16, 2022 12:41 PM

    What product/components do you use and which version/fix level are you on?

    API Gateway 10.5

    Is your question related to the free trail, or to a production (customer) instance?

    No

    What are you trying to achieve? Please describe in detail.

    Use case is to create an API that authorizes incoming request against users who belong to a LDAP group that is configured in API Gateway. I have created a team containing the LDAP group and added the team in the List of Teams on the Authorize user policy.

    On the Identify and Authorize Policy I have the condition type of OR
    Identification Type: HTTP Basic Authentication
    Application Lookup Condition : Global applications and defaultApplication
    Allow Anonymous : False

    Do you get any error messages? Please provide a full error message screenshot and log file.

    The error message is: A violation of policy was detected: Unauthorized application request.

    If I add the user in usermanagement it works, but we want to use LDAP to identify users not add thousands of users to API Gateway.

    Have you installed all the latest fixes of the products and systems you are using?


    #API-Gateway
    #API-Management
    #webMethods


  • 2.  RE: Configuring Basic Authentication and LDAP in API Gateway

    Posted Mon August 29, 2022 01:56 AM

    Hi,
    I am assuming you are trying this on on-premise environment. Can you please validate if LDAP configuration is working fine, you can try logging in using LDAP user. Also, you can create a application and explicitly add the permissions and try.

    Regards.


    #webMethods
    #API-Gateway
    #API-Management