Issue using Oauth2

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

I am currently using: Sailpoint IdentityIQ 8.3

image
image678×460 15.3 KB

I am facing problems while trying to obtain an authentication token, I have tried setting the following parameters in settings:

  • Access Token Authentication Scope : access_as_user
  • Access Token Authentication Audience : /iiq/api
  • Access Token Authentication Issuers : https://iiq.company.com/identityiq/oauth2
  • Correlation Variable : client_id

curl --location -k ‘https://iiq.company.com/identityiq/oauth2/token’
–header ‘Content-Type: application/x-www-form-urlencoded’
–header ‘Accept: application/json’
–header ‘Authorization: Basic client_id:client_secret’

Above you can see the call I am trying to do and I am getting either a HTTP CODE 405 or a timeout.

The main goal here is to develop a plugin exposing some API calls to integrate IIQ with a ticketing application, so my organization has decided to authenticate using Oauth2.0 in order to use these API.

Scim API is discarded because it isn’t possible to limit the scope as you could in a plugin.

If someone has ever used this kind of authentication with similar purposes I’d be happy to know how it can be done properly.

Thanks a lot.

2

I haven’t tried this but we use OAuth Client Management for exposing the API’s using plugin , or you can even use ootb SCIM API’s.

3

As I said in the post we can’t use SCIM API so we decided to build a plugin instead, but the doubt here is how OAuth Client Management should be configured, if you have done that before, which settings do you use in Identity Authentication Token Settings?

Thank you for your response.

4

Have you tested in postman first whetehr it is returning correct?

5

I can’t try it in Postman because my organization doesn’t allow Postman Desktop and our IIQ isn’t public.

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.