Hi Shiva,

Since you require completely isolate api manager deployment with shared
tokens. Sharing tokens means, you will require the same application to
existing in both the environment. Because token will be issued for an
application.

Is same user base shared between both the environments? Can same user come
and create an application in both environments? If so it will be difficult
to achieve this requirement. I can see only two possible options, one would
be to have a central key manager. But you will require sharing the AM_DB
with key manager. Which means the same APIs will also appear in both the
environment.

The other option is to have token sync up script which will sync token
between environment. Again if you don't share same applications between
environments, this would be very complicated.

Thanks,
Harsha

On Wed, May 2, 2018 at 7:07 PM, Gimantha Bandara <[email protected]> wrote:

>
>
> On Wed, May 2, 2018 at 6:46 PM, Shiva Kumar <[email protected]>
> wrote:
>
>> Hi All,
>>
>> I have a requirement to have independent WSO2 APIM Setups 2 or more which
>> have their own environment. If a token generated in one environment it
>> should be allowed to access the resources in the second environment and
>> vice versa. How I can achieve this. One solution that came to my mind is to
>> use centralized key manager but the environment should have isolated key
>> managers with their own applications specific to that environment. Please
>> suggest any possible approach. I have attached a current architecture.
>>
>> Thanks
>>
>> Shiva Kumar
>>
>>
>> _______________________________________________
>> Architecture mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>
>>
>


-- 
Harsha Kumara
Software Engineer, WSO2 Inc.
Mobile: +94775505618
Blog:harshcreationz.blogspot.com
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to