[MQ 9.3.4 Oct 2023]

Obtaining an authentication token from your chosen token issuer

Write your application to obtain an authentication token from your chosen token issuer when it connects to an IBM® MQ queue manager.

Before you begin

Refer to the information in Using authentication tokens in an application.

Procedure

How you obtain an authentication token, and the exact contents of the token, varies between different token issuers.
Write your application to interact with your chosen token issuer to request and obtain the authentication token.
The authentication token must conform to the IBM MQ requirements for authentication tokens. For more information about these requirements, see Requirements for authentication tokens.
If you intend to adopt a user ID that is contained in a token claim as the context for the application, the authentication token must also meet the following requirements:
  • The authentication token must contain a claim that matches the user claim name in the queue manager's token authentication configuration.
  • The value of the user claim must meet the requirements for user IDs in authentication tokens. For more information, see User IDs in authentication tokens.

Results

You have now obtained a correctly formatted JWT which can be presented to IBM MQ for validation.