WebService OAuth Authorization and password grant type

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi ,
I am using Webservice Connector and Authentication method is OAuth2 and grant type is Password. here, in username and password , i need to use two usernames and passwords.
one username/password is related to API and another username/password is related to the application for token generation/performing operations.

the query is , how to configure both usernames and passwords.

Can anyone help, regarding the issue.

Thanks,
Akash

2

Can you share some api documentation?

3

@AkashRaavi131 Could you provide more details or share the API documentation?

Typically, there are scenarios where you need to obtain a token by calling a token API with a username and password, and then use that token for subsequent API requests. However, we would need to understand your specific requirements to assist you further.

4

Are you referring to the OAuth 2.0 Password Grant type, which requires a username, password, client ID, and client secret?

If so, here are two approaches to consider:

  1. Use “No Authentication” in the Web Services Connector configuration and implement a Before Rule using BeanShell. This rule can retrieve and inject the necessary token or credentials at runtime. Ensure any sensitive values stored in the application object are properly encrypted and decrypted.
  2. Configure OAuth Headers directly in the Web Services Connector. Detailed steps can be found in the SailPoint Web Services Connector documentation (see page 23 of the SailPoint Web Services Connector Guide.pdf for version 8.4).

Both methods provide flexibility for handling OAuth 2.0 authentication while maintaining security and integration integrity.

1 Like
5

yes right @nbhansali mentioned right approach, you can follow

6

Hi @nbhansali ,

Thank you for the reply.
Issues is fixed and able to generate the token.
Added oauth_request_parameters entry in the application.xml file.

Thanks,
Akash

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.