How to apply 2 Authentication into API Gateway for same API Endpoint?

[nullmicgo (Michael Lau)]

What product/components do you use and which version/fix level are you on?

webMethods API Gateway

Is your question related to the free trial, or to a production (customer) instance?

Production (customer) instance

What are you trying to achieve? Please describe it in detail.

I was trying to apply 2 Authentication in API Gateway for the same API.
In the below diagram, Use Case 1 - Customer will call the API and it is using JWT Validation in API Gateway.
In Use Case 2, it is a batch job process to API through webmethod API Gateway.

According to the document, it is supporting the ‘OR’ Condition.
But it seems it would throw an error for the mTLS-only case.
Please advise

Do you get any error messages? Please provide a full error message screenshot and log file.

Have you installed all the latest fixes for the products and systems you are using?

[Prabaa (Prabavathy Arumugam)]

Hi Michael,
I have few questions on the use case. Are you trying to use JWT OR SSL cert as authentication? Also have you set up any applications?

Please share the error you are receiving when you are trying SSL only.

Regards.

[nullmicgo (Michael Lau)]

@Prabaa

Are you trying to use JWT OR SSL cert as authentication?

Are you trying to use JWT OR SSL cert as authentication? <— I was trying to 2 Authentication.
1 is JWT and the other is SSL Cert.
Because JWT one is a request coming from a user.
SSL Cert is a Backend Schedule Job to call into the same API.

I didn’t have an error yet but want to understand if this setup is technically feasible or not.

[Prabaa (Prabavathy Arumugam)]

Hi Michael,
This is possible if you use condition type OR in Identify & Authorize policy.

Regards.

[nullmicgo (Michael Lau)]

@Prabaa

This is possible if you use condition type OR in Identify & Authorize policy.

Thank you. will try

[nullmicgo (Michael Lau)]

HI @Prabaa

sorry, still have a questions on this

If I have to support 2 different JWT Validation on the same API, how to config it from the panel?
For example the same API for Customer and Staff Access. They will have two different AuthN.
In (2), it is only allowed to select 1 JWT.
and not allowed me to add one more “Identity and Authorize Application” (3).
Not sure if the correct way to make it support 2 JWT Validation is.
Thank you