Web Services: Configuring basic auth via custom auth scheme

The docs are a little confusing on how to use the cust auth scheme for basic auth (clientid + secret):

I have a few questions:

This is the custom auth endpoint


1) What is the relationship between the values entered under “connection settings” and “Custom Authen” end point that’s configured? (the client id/secret is entered in both places)

2) How is the “Attribute Path” under response mapping configured? What does it point to?"
This part of the doc is confusing

3) Does the base64 encoded (client id+secret) authz header have to match what’s in the Connection Settings tab?

Each operation has this authz header.

4) How is “$application.accesstoken$” generated and how frequently is it invoked?

Custom Auth is used when there is a need to generate the access token on its expiration. Let’s says some apps set the expiration time to 12 hrs. In this case we need to generate new access token once in every 12 hrs for successful authentication.
Connection settings is where we enter values on what authentication type you select. For above scenario you need to select custom authentication as authentication type in connection settings. Here you just need to pass the base url. So, it all depends on the Auth type that app supports.

Attribute path is actually the JSON path of what you need. For example in Postman when you generate the access token, you receive the response as JSON body. Here in order to get the access token, you need to define the JSON path. Response mapping is inline with response information where you will define the root path. You can use this tool to fine the JSON Path JSONPath Online Evaluator

It’s not mandatory to pass the client ID and secret in connection setting tab as we are passing them in HTTP operations. If you pass them, yes they should be same

$application.accesstoken$ is a variable that store the access token generated from custom auth operation. In custom auth operation you need to capture the access token in accesstoken variable.

I know the doc confuses us a bit. Once you make your hands dirty on this, you will be clearer!!

1 Like

Thanks @JackSparrow !

Running into this issue. Any idea?

Custom Authentication JWT refresh issue - SailPoint Developer Community