Certificate Authentication for Web service connector

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Hi All,

We are onboarding one web service connector application, and we have to authenticate the API’s using token, but we have to generate that token by using certificate. from postman we are able to generate the token by importing certificate. but how to do this in SailPoint IIQ side using certificate.

Any suggestions and help would be appreciated.

Thanks.

2

Hi @vin123

Please refer the below article for more info. Check the section “Enable Client Certificate Authentication“

3

Thanks for reply.

We having .p12 certificate file to import on servers, can anyone please suggest the step to import that file to fix authenticate issue in SailPoint IIQ. And it is working from postman after importing .p12 file.

4

Hi Vin,

First convert the certificate in .jks format.

keytool -importkeystore \
  -srckeystore client.p12 \
  -srcstoretype PKCS12 \
  -destkeystore client.jks(conversion file name) \
  -deststoretype JKS

you will be prompt to enter the password remember the password.

  1. Copy the .jks to the IIQ server , from where tomcat can read it.
    belos is the sample path
    /app/certs/client.jks

Step 3: update the below in the setenv.sh file
-Djavax.net.ssl.keyStore=/opt/sailpoint/certs/client.jks
-Djavax.net.ssl.keyStorePassword=yourpassword(put the password which you enter above
-Djavax.net.ssl.keyStoreType=JKS

Restart tomcat post that.

Try these steps and let me know, if it fixes your issue.