You can now use IBM Cloud services in an Open Service Broker-compatible Cloud platform

Open Service Broker (OSB) API is an industry-wide initiative to define a standard way to deliver services to applications running within cloud-native platforms. IBM Cloud Platform Open Service Broker is an IBM Cloud-hosted implementation of the OSB APIs that facilitate listing, provisioning, and binding of services from the IBM Cloud catalog. You can register for an IBM Cloud Platform OSB and get back a proxy URL, which can then be used to register into any OSB-compatible cloud platform. After registration, all supported IBM Cloud Platform services will be available for listing, provisioning and binding within that platform’s environment.

Note: The IBM Cloud Platform OSB is currently in Beta, but the services in which it enables may not be. Please refer to the IBM Cloud catalog page for individual details of each service.

IBM Cloud Platform OSB architecture

The following diagram provides a high-level overview of the IBM Cloud Platform OSB architecture:


Supported environments

Any environment that runs on an OSB-compatible platform can utilize the IBM Cloud Platform OSB.

IBM-Hosted environments

These are environments where there’s an IBM control layer that facilitates the interaction with the environment. These are hosted on IBM Cloud and managed by their respective control layers.

  • IBM Cloud public: An isolated environment for hosting customer’s Cloud Foundry apps available across multiple regions. The entire IBM Cloud service catalog is available out-of-the-box.

  • Cloud Foundry Enterprise Environment: An isolated environment for hosting customers’ Cloud Foundry apps with full admin control over configuration, capacity, and access. While provisioning a Cloud Foundry Enterprise Environment instance, an instance of IBM Cloud Platform OSB is registered into the environment.

  • IBM Cloud Kubernetes Service: An isolated environment that enables customers to deploy secure, highly available apps in a native Kubernetes experience. Out-of-box enablement is in progress. Refer to the “Getting started” section of this post for further details on enablement.

Bring-Your-Own-Environment (BYOE)

These are environments where your apps are running on an OSB-compatible platform and want to provision and bind to IBM Cloud platform services.

  • IBM Cloud Private: An application platform for developing and managing on-premises, containerized apps. It supports both Cloud Foundry and Kubernetes platform flavors. Out-of-box enablement is in progress. Refer to the “Getting started” section of this post for further details on enablement.

  • Others: These are other environments that the customer can stand up in their local, island’s environment (e.g., Minikube). Refer to the “Getting started” section of this post for further details on enablement.

Getting started

The following information details the basic steps for getting started with IBM Cloud Platform OSB.

Set up IAM access to IBM Cloud Platform OSB

Login to the IBM Cloud console and go to Manage > Access (IAM). In either the Users or Service IDs section, click on the identity that you want to give access. Here, we’re interested in giving an IAM identity access to register for an IBM Cloud Platform OSB, so click on the Access policies tab. Now, you should see an Assign access bottom option.  After selecting that option, select Assign access to resources, and from the list of services, choose IBM Cloud Platform OSB and assign at least an Editor role.

Click Assign. The identity now should be able to register for an IBM Cloud Platform OSB.

Register for an IBM Cloud Platform OSB

Registering for an IBM Cloud Platform OSB returns you a proxy URL and basic credentials which can be used to register a broker into the OSB-compatible platform of your choice.

At the moment, IBM Cloud console and CLI are being enhanced to do this, so for now, registration will be done by using the Resource Controller API layer.

Using your IAM identity bearer token, issue a similar cURL.


Authorization: IAM bearer token

Route: POST /v2/resource_brokers


curl -X POST \ \
  -H 'authorization: Bearer <IAM_TOKEN>' \
  -H 'content-type: application/json' \
  -d '{
    "name": "My IBM Cloud Platform OSB",
    "resource_group" : "0be5ad401ae913d8ff665d92680664ed",
    "run_as_system": false
    "name": "My IBM Cloud Platform OSB",
    "resource_group_crn" : "Resource Group CRN of the broker owner",
    "account_id": "IBM Cloud account id"
    "crn": "broker CRN",
    "guid": "broker guid",
    "url": "relative url for broker",
    "auth_username": "apikey",
    "auth_password": "generated password",
                 "auth_scheme": "basic",
    "proxy_broker_url": "generated proxy broker url",
    "serviceid_crn": "crn of the serviceid generated"

Important: Save the auth_password since on subsequent GETs, it will NOT be printed back.

Next steps

Additional references



More from Cloud

IBM Cloud inactive identities: Ideas for automated processing

4 min read - Regular cleanup is part of all account administration and security best practices, not just for cloud environments. In our blog post on identifying inactive identities, we looked at the APIs offered by IBM Cloud Identity and Access Management (IAM) and how to utilize them to obtain details on IAM identities and API keys. Some readers provided feedback and asked on how to proceed and act on identified inactive identities. In response, we are going lay out possible steps to take.…

IBM Cloud VMware as a Service introduces multitenant as a new, cost-efficient consumption model

4 min read - Businesses often struggle with ongoing operational needs like monitoring, patching and maintenance of their VMware infrastructure or the added concerns over capacity management. At the same time, cost efficiency and control are very important. Not all workloads have identical needs and different business applications have variable requirements. For example, production applications and regulated workloads may require strong isolation, but development/testing, training environments, disaster recovery sites or other applications may have lower availability requirements or they can be ephemeral in nature,…

IBM accelerates enterprise AI for clients with new capabilities on IBM Z

5 min read - Today, we are excited to unveil a new suite of AI offerings for IBM Z that are designed to help clients improve business outcomes by speeding the implementation of enterprise AI on IBM Z across a wide variety of use cases and industries. We are bringing artificial intelligence (AI) to emerging use cases that our clients (like Swiss insurance provider La Mobilière) have begun exploring, such as enhancing the accuracy of insurance policy recommendations, increasing the accuracy and timeliness of…

IBM NS1 Connect: How IBM is delivering network connectivity with premium DNS offerings

4 min read - For most enterprises, how their users access applications and data is an essential part of doing business, and how they service those application and data responses has a direct correlation to revenue generation.    According to We Are Social’s Digital 2023 Global Overview Report, there are 5.19 billion people around the world using the internet in 2023. There’s an imperative need for businesses to trust their networks to deliver meaningful content to address customer needs.  So how responsive is the…