Deploying and starting Jazz Authorization Server

After you complete the prerequisite tasks, deploy and start the Jazz Authorization Server.

Restriction: Jazz Authorization Server is not supported to be used with basic authentication. However, other authentication methods such as client certificates, Form, SAML, and OIDC are supported.
Note: Jazz Authorization Server is bundled with the Apache Derby database, but setting up a cluster of Jazz Authorization Server only supports enterprise databases such as Db2® or Oracle.

After you configure a user registry, create a self-signed security certificate and keystore configuration for the Jazz Authorization Server, and make any other customizations to the IBM WebSphere Liberty, deploy and start the server.

You can also configure Engineering Lifecycle Management applications to run as Windows services. See Running Engineering Lifecycle Management applications as Windows Services for more information.

Verify that the Jazz Authorization Server is running

To verify that the server is running, complete either of the next steps:
  • Open a web browser and go to the following URL:
    https://host.example.com:9643/oidc/endpoint/jazzop/.well-known/openid-configuration

A JSON document that contains configuration parameters (mainly endpoint URLs) is displayed.

Verify that the user registry is configured correctly

To verify that the user registry is configured correctly, complete the next steps.
  1. Open a web browser and go to the following URL:
    https://host.example.com:9643/oidc/endpoint/jazzop/registration

    You are prompted for login credentials.

  2. Specify the authentication credentials of a user in your user registry who has Jazz administrative privileges. Assuming that no applications are registered, a small JSON document is displayed.