Question

4
Replies
770
Views
 Arjit Zechariah Rajan (ArjitZ95)
HCL

HCL
AU
ArjitZ95 Member since 2013 1 post
HCL
Posted: April 5, 2016
Last activity: April 14, 2016
Posted: 5 Apr 2016 4:46 EDT
Last activity: 14 Apr 2016 11:27 EDT
Closed

OAuth 2.0 work around in Pega 7.1.9

Hi All,

We are aware of the fact that OAuth 2.0 feature was made available in 7.2. We are trying to connect to an API that has OAuth 2.0 security protocol and our application is built on 7.1.9. Apparently we have no scope for upgrading our application to 7.2. So is there any work around to connect to this API. If it has been implemented in 7.2 there must be some activities or other OOTB rules that can be crafted in 7.1.9.

Data Integration Security
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 5 years ago
Posted: 6 Apr 2016 22:02 EDT
Kevin Zheng (KevinZheng_GCS)
PEGA
Director, Software Solutions Engineering
Pegasystems Inc.
US

If I were you, I would install a pega 7.2 system (for simplicity may be a PE version). Start with the Data-Admin-Auth-Service

OAuthAuthentication

There you can find the pzOAuth2AuthenticationActivity for authentication and I am not how feasible it is to backport the stuff to 7.1.9 - If you just want to use part of the implementation details you may be able to use some of the examples there.

There is also another auth-service OAuthResourceAuthentication to handle token authentication.
Posted: 5 years ago
Posted: 14 Apr 2016 11:20 EDT
Arjit Zechariah Rajan (ArjitZ95)
HCL

HCL
AU

Thanks for your Inputs Kevin!!.

The end connection to the Resource Server(API Server) will be through a REST Connector. As in 7.1.9 we cannot use OAuth 2.0 along with REST connector OOTB, We were planning to use 2 REST connectors. The first one to get the access token from the AUTH server through a POST method and save it in a clipboard property and then send this access token to the Resource Server through the POST method of another REST connector. But the idea to make two explicit calls has been adjourned as of now.
Posted: 5 years ago
Posted: 14 Apr 2016 11:27 EDT
Arjit Zechariah Rajan (ArjitZ95)
HCL

HCL
AU

Thanks Sudheer for the valuable Information!!

The API is using OAuth 2.0 with client credentials grant type. We are currently looking for a way to implement this without making 2 explicit calls and automate the entire process of getting the access token and sending it to the API in a single call.