Maximo Manage supports OAuth 2.0 client credentials grant type where we send client ID and secret ID to an OAuth provider URL for authentication and receive an access token.
OAuth authenticated service API can be accessed from Maximo Manage for End Points HTTP handler and WEBSERVICE-JAX-WS handler.
Steps to create OAuth enabled End point
1. Most of OAuth using TLS or SSL handshakes, so we must upload the Manage trust store with the certificates from the OAuth provider
2. Access to object Structure MXAPIOAUTHCLIENT should be given to the security group.
3. Configure the OAUTH client properties in the End Point applications -> "Add/Modify OAuth Clients" Action
4. Check the table MAXOAUTHCLIENT to confirm whether the token is generated correctly.
The OAuth provider specifies an expiration interval for the access token. After expiration, a new token is generated when a new authentication request occurs.
select accesstoken, granttype, clientid, * from maximo.maxoauthclient
5. Use the OAuth Client parameter in the HTTP Handler End point to use this authentication mechanism.
6. To test the HTTP end point with oauth, create an automation script with invokeEndPoint function to get the response. code oauthhttpendpointmas.py
from java.util import HashMap
from com.ibm.json.java import JSON
from psdi.iface.router import HTTPHandler
from com.ibm.json.java import JSONObject
metaData = HashMap()
headers = HashMap()
metaData.put(HTTPHandler.HTTP_HEADERPROPS, headers)
urlProps = HashMap()
urlProps.put("limit","5")
urlProps.put("offset","0")
metaData.put(HTTPHandler.HTTPGET_URLPROPS, urlProps)
response = service.invokeEndpoint("OAUTH",metaData,'')
obj = JSON.parse(response)
Reference:
