Hi all,

WSO2 Identity Server has REST APIs for user account associations[1]. As of
now these APIs provide the capability to work with local user account
associations and do not support federated user account associations.

I have been working on this to support federated user account associations
with the User Account Associations API[1]. As planned, the following APIs
will be added with this effort.

   - [GET] : /me/federated-associations
      - Retrieve the federated associations of the authenticated user.
   - [GET] : /{user-id}/federated-associations
      - Get user's federated associations
      - [DELETE] : /me/federated-associations
      - Delete all my federated user associations
      - [DELETE] : /{user-id}/federated-associations
   - Delete user's all user federated associations

I am also evaluating the possibility of adding an API to create federated
associations. I will update this thread with the progress.

The internal implementation for the above APIs will use the
UserProfileAdmin[2] underneath(The UserProfileAdmin[2] is used by the
UserProfileMgtService) through the OSGi framework. In the early
discussions, we have tested registering the UserProfileAdmin[2] directly as
an OSGi service, but we will discuss it further to find the optimum
approach.

Please provide your valuable feedback on this.

[1] https://is.docs.wso2.com/en/next/develop/association-rest-api/#/
[2]
https://github.com/wso2/carbon-identity-framework/blob/master/components/user-mgt/org.wso2.carbon.identity.user.profile/src/main/java/org/wso2/carbon/identity/user/profile/mgt/UserProfileAdmin.java

Regards,
-- 
*Tharindu Bandara*
Senior Software Engineer | WSO2

Email : tharin...@wso2.com
Mobile : +94 714221776
web : http://wso2.com
<https://www.google.com/url?q=http://wso2.com&sa=D&ust=1517653383990000&usg=AFQjCNFggB4bSJTKmdqKcBV0VY9xx1ABKg>

https://wso2.com/signature
_______________________________________________
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to