GCP API Gateway Support

SailPoint Human Fabric (SHF) SHF Discussion and Questions
, ,
1

Hi,
To add some context here:

We have an app in GCP. We are exposing its SCIM API via GCP API Gateway.
When reviewing the GCP API Gateway auth methods it uses the JWT.

Has anyone successfully got their apps using this method connected as a source in ISC using either Web Service or SCIM 2.0 connectors without having to do any before rules?

I now keep hitting an error where it states -

Exception occurred in Test Connection. Error: Error extracting private key, please check password and data.Unable to create key pair

I know my private key is correct and the password as its been tested in OpenSSL.

2

Yes,

SailPoint can work with an Application exposed through GCP API Gateway, provided the gateway exposes standard REST/SCIM endpoints and supports a SP compatible authentication method (OAuth 2.0, client credentials, JWT etc).

Use a webservices or SCIM 2.0 connector and point it to the API Gateway URL. The gateway is treated as the API endpoint’; SP does not require native “GCP API Gateway support.”

configure authentication at the gateway and ensure required endpoints are reachable by SailPoint.

3

sailpoint does not require native GCP API Gateway support. Treat the gateway as the API endpoint and connect through:

  • SCIM Connector if the application exposes SCIM APIs.
  • Web services Connector for custom REST APIs.
  • Configure a supported authentication method (OAuth 2.0, JWT, client credentials etc ) on the gateway and in the connector.
4

Hi @BBR1
Thank you, I managed to use postman to confirm auth works but sailpoint still fails with the private key error. I’ll keep digging.