Overview of Keystore and Truststore
You must have the
API Gateway's
manage security configurations functional privilege assigned to perform the
following tasks in the security configuration section of
API Gateway:
- Configure the keystores and truststores required for incoming and outgoing message-level and transport-level security.
- Configure ports of API Gateway.
- Configure the SAML issuer to use in API Gateway outbound authentication to fetch the SAML token from the STS (Security Token Service).
- Configure the custom assertions to use in inbound authentication of API Gateway.
- Configure Kerberos settings.
- Manage master password.
- Configure JSON web token(JWT), OAuth, and OpenID authorization servers and third-party providers.