Before you can authenticate and get an access token from the authentication server (IBM® Security Verify) to access the protected resources, you must register your OAuth client applications for IBM Guardium® Exposure Manager. When you register your applications, you receive back two keys: a client ID and a client secret. The applications use these keys to initiate the OAuth flow.
About this task
Complete the following steps to register an OAuth application.
Procedure
-
From the main menu, select .
-
On the OAuth clients page, click Create OAuth client.
-
Under the Step 1: Generate section, enter the Application name and Application description (optional) to identify the application for you.
-
Click Create OAuth client to generate the following information under the Step 2: Retrieve section:
- OAuth client ID: A public identifier to identify your application. To copy the client ID, click the Copy to clipboard icon.
- OAuth client secret: A unique key that is generated when you register your application. This confidential key is used for authentication. It is important that you ensure that the generated secret is stored securely. To copy the client secret, click the Copy to clipboard icon.
-
Click Done.
Important: After you click Done, you cannot retrieve the OAuth secret. Ensure that you copy the secret and store it securely before clicking Done.
What to do next
On the OAuth clients page, you can view a list of registered applications with details such as name, description, and the client ID. Use the OAuth client ID and client secret to obtain the OAuth access token from the authentication server (IBM Security Verify). You can access the IBM Guardium Exposure Manager resources by using the OAuth access token. For more information, see Accessing APIs with OAuth.