Adding IDCS as external authorization server for webMethods API Gateway

[vaishnavi.s171 (Vaishnavi Sreerangam)]

I am trying to configure IDCS (Oracle Identity Cloud Service) as external authrization server in API gateway 10.7
I followed steps provided in the below link :

Securing APIs using 3rd party OAuth 2 provider in API Gateway

Author: Naramsetty, Srikar <Srikar.Naramsetty@softwareag.com> Supported Versions: 10.3 and above For securing APIs using thirdparty OAuth2 identity provider in API Gateway for versions 10.2 and below please refer http://techcommunity.softwareag.com/pwiki/-/wiki/Main/Securing+APIs+using+thirdparty+OAuth2+identity+provider+in+API+Gateway webMethods API Gateway tutorial Overview of the tutorial This tutorial helps to understand how a third party OAuth 2 identity provider and authorization ser…

I provided Remote introspection details, Metadata and scope.
When I test the external auth server, I do not see any success/ failure message.
But when I make a request from postman, I am getting unauthorized error.
Where to see and understand the error - API gateway not able to connect to IDCS server for authentication but what is causing error?

[vaishnavi.s171 (Vaishnavi Sreerangam)]

Hi team,
I understand IDCS as Authentication Service implements standard OpenID Connect (OIDC) 3-legged User Authentication flows on top of the standard OAuth2 protocol.
below are the options needed in API gatewate for adding external authorization server .

In Introspection local is used for Open id and for any type that supports JWKS.
Remote Introspection is to validate token at auth 2.0 server end.
Now how to configure IDCS which supports Open id on top of oauth.
Kindly help step by step process to configure IDCS in API gateway.

[srikanth.prathipati1803 (Srikanth Prathipati)]

Typically, Open ID Connect comes with a discovery URL. Find out the discovery URL for IDCS (Oracle Identity Cloud Service)

[vaishnavi.s171 (Vaishnavi Sreerangam)]

hi @srikanth.prathipati1803 , Yes I have discovery url , I see below when I click discover.

This metadata url has all configuration details.

API GW not able to fetch details. When I try to add I see below.

Then I started entering details manually, IDCS has oauth 2.0 on top of the open ID connect.
I gave below details for now along with scope. I do not see any error but when I test the connection, nothing pops up (success, error etc.)

The given meta data url has many details and where to fill these details. It says local or remote introspection but meta data url has details issuer and jwks_uri for local and introspection_endpoint for remote.

I have a change to provide all these details under provider section and this provider can be enabled only for dynamic client registration and oracle says we do not need it and gave us client id and client secret

Kindly suggest.

Thanks & Regards,
Vaishnavi. S
Senior webMethods Developer.

[srikanth.prathipati1803 (Srikanth Prathipati)]

This should not happen. Is this cloud or on-premises?
If its on-premises, please do check the proxy server.