Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Godwin Shrimal
Hi Thomas, Ok, When you send a request to token API in the APIM, it should call the oauth2 token API of the IS (if you have configured IS as a Keymanager correctly), So according to the behaviour (with the given information), there is something wrong with your Keymanager related configurations in

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Tharindu Edirisinghe
Hi Thomas, Try a request similar to following and see if it works. You need to change the values highlighted. curl -k -X POST -H "Authorization: Basic **" --data "grant_type=password=openid=*WSO2.COM/tharindu *=*tharindu*" https://apim:8243/token Thanks, TharinduE

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Thomas LEGRAND
Hello Godwin, Thank you for the directions. But I found out that the hostname of the IS was bound to the wrong IP in my hosts file. It is awkward :s Regards, Thomas 2018-01-18 14:25 GMT+01:00 Godwin Shrimal : > Hi Thomas, > > Ok, When you send a request to token API in the

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Godwin Shrimal
Great to hear you could resolve the issue :) Thanks Godwin On Jan 18, 2018 8:39 PM, "Thomas LEGRAND" wrote: > Hello Godwin, > > Thank you for the directions. But I found out that the hostname of the IS > was bound to the wrong IP in my hosts file. It is awkward :s

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Thomas LEGRAND
Hello Godwin, For you first point: I created a user from the IS console in the primary user store. I can see it from the AM console. Then I tried with cUrl to generate a OAuth token for this user and that works: curl -v --basic -u Lz6FaylMv5fF5ax4TrTZzlvlEowa:ih0znfMUS6lgqShXSYcDlhEUMqYa -k -d

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Godwin Shrimal
Hi Thomas, Ok, That means you have configured secondary user store correctly and its ready for authentication. When you call the token endpoint of the API manager, that API calls the API of the IS to create the access token (If you have properly configured IS as a Keymanager), then authentication

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Thomas LEGRAND
Hello everybody, First, thank you for all of your answers :) Then, here is a screenshot of the users list in the **IS**, where we can see that I have a user (versusmind) stored in a secondary user store (with the domain RGPD) : [image: Images intégrées 1] Then, I tried to execute the following

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-18 Thread Mushthaq Rumy
Hi Thomas, Do you have special characters in your password? If so could you please try encoding the url characters in your password and execute the curl command again? Thanks & Regards, Mushthaq On Wed, Jan 17, 2018 at 7:11 PM, Thomas LEGRAND < thomas.legr...@versusmind.eu> wrote: > Hello, > >

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-17 Thread Godwin Shrimal
Yes, So Thomas's issue should be something different since he has used correct format of a request(Without using user store domain). @Thomas: Can you login to IS Management console and check secondary user store's users are listing under Users & Roles->List-> Users? Thanks Godwin On Thu, Jan

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-17 Thread Sathya Bandara
Hi, On Thu, Jan 18, 2018 at 12:20 PM, Godwin Shrimal wrote: > Hi Sathya, > > Ideally, user should get authenticated even you send without user store > domain. right? > Yes. user gets authenticated without the user store domain. If the user is in super tenant

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-17 Thread Godwin Shrimal
Hi Sathya, Ideally, user should get authenticated even you send without user store domain. right? Thanks Godwin On Thu, Jan 18, 2018 at 1:15 PM, Sathya Bandara wrote: > Hi Thomas, > > Can you try with the following curl command. > > curl -v -X POST --basic -u : -H >

Re: [Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-17 Thread Sathya Bandara
Hi Thomas, Can you try with the following curl command. curl -v -X POST --basic -u : -H "Content-Type:application/x-www-form-urlencoded;charset=UTF-8" -k -d "grant_type=password=/sathya1@carbon.super=admin" https://localhost:8243/token [1] https://docs.wso2.com/display/AM210/Password+Grant On

[Dev] API Manager with Identity Server as Key Manager - IS secondary user store to connect to APIM Store

2018-01-17 Thread Thomas LEGRAND
Hello, I configured the Identity Server (IS) to be the Key Manager of the API Manager (APIM). In the IS, I configured a secondary user store where I will have my users of my applications. But, I think I missed something because when I want to generate a OAuth token for a user stored in this