OAuth2 : Authorize MuleSoft API Using OKTA OIDC | OAuth2 | API Manager

[@deepeshdubey2572]

Good and very nice explaination sir

[@saisrinu243]

Excellent, Incredible stuff delivered . Thanks a lot Jitendra. Keep Rocking

[@amitkushwaha2682]

Great video. Learnt in depth.

[@everardofloresquiroz5184]

Great Video, Thanks so much Jacky!! regards from Mexico.

[@muletechnologyacademy-zero5625]

Thanks

[@nitishjain4218]

Learnt a lot from this video. Thank You "BOSS"

[@spnpadmanabhan]

Great Job Jacky

[@sibaprasaddas2519]

I can see the openId policy in Automated Policies but not able to see the policy in api manager application. I have attached OIDC instance to Env.

[@rajchaudhary043]

Good one. One comment, for Mule 4.3, you have to change "Client provider" in your API proxy otherwise Open ID policy will not appear.

[@kunaalkshyp4506]

WHERE exactly do I need to change that?....unable to find it.

[@AnuranjanArya]

Hi Jitendra, I was trying your video but unable to find OpenID Connect access token enforcement?

[@ashish902]

Good video. But my doubt is, does it make sense to use policy for oauth2 implementation if user of api(other api) have to manually generate token then use it instead of using client id and secret of Authorization? Then shouldn't we do manual implementation of oauth2 in api.

[@consciousmi4842]

counld you make a tutorial on writing connector for okta? THat would be helpful

[@pralhadpoul8982]

Hi Jitendra,Can we use any other Identity Management service provider like PingFederate instead of Okta here?

[@muletechnologyacademy-zero5625]

Pralhad Poul I have published video on AWS Cognito as Identity Provider.

[@pralhadpoul8982]

@@muletechnologyacademy-zero5625 I have seen your video AWS Cognito as Identity provide but my question to you is can we use PingFederate as Identity provider instead of AWS Cognito?

[@HR-wz9nu]

Great video, how to do the same for salesforce as oauth provider instead of okta ?

[@sanjeev.tripathi]

Hi Jitendra, I have configured the client provider but not getting OpenId policy listed in API manager. I have tried with both auto discovery and proxy of api. I am trying with anypoint trial account. Can you tell me what could have gone wrong? Thanks.

[@muletechnologyacademy-zero5625]

Hi, There has been changes made recently. You need to go to environment and attached oidc to that environment. You should able to see openid connect policy in app manager. Also.make sure you attached oidc to.api manager instances.

[@sanjeev.tripathi]

@@muletechnologyacademy-zero5625 Thanks Jitendra for reply. I had tried that as well. I have three environment dev, test, prod of types sandbox I have attached client provider to all three but still I am not getting the OpenId policy for active api instance in api manager. I only seeing a related policy "OAuth 2.0 access token enforcement using Mule OAuth provider" (including others) but not OpenId policy. Thanks.

[@sanjeev.tripathi]

I am able to resolved this by assigning client provider to api as well.

[@muletechnologyacademy-zero5625]

@@sanjeev.tripathi I had mentioned in my reply same thing. Assign to api also

[@sanjeev.tripathi]

@@muletechnologyacademy-zero5625 I didn't realise that when you mentioned "you attached oidc to.api manager instances". I thought you are talking about oidc policy in api instances (v1 etc) which I didn't get it in policy list in api manager. Once I assigned the client provider to api then I got the OpenID policy in list and was able to assign it to instance. Thanks for video.

[@saisrinu243]

Thanks Jitendra , for proving wonderful session. I have one scenario , If an API had 4 resources,. and we configured 2 client applications for that API (say A and B) . my requirement is we need to Authorize Client A for some resources and methods, and We need to authorize client B for some resources . when I try to configure policy in API manager, its allowing to configure the policy for single scope., could you please put some light on these kind of scenario

[@saisanthosh8491]

Hi Jithendra, Your videos are very useful. i am trying to apply the oAuth2.0 policy by using Okta. could you please suggest me what is the Access Token validation endpoint url in anypoint platform. Thanks in advance

[@muletechnologyacademy-zero5625]

You need to use JWT validation policy and jwks uri for validating token. I have published video on same.

[@dineshvarma9851]

Hi Sir, Could you please explain how to apply PingFederate Policy in mule 4?

[@madhun5418]

Hi sir, how do we create poc in mulesoft?

[@muletechnologyacademy-zero5625]

You need to have all required software for doing proof of concept. But exactly what you are looking for?

[@madhun5418]

Yes sir, exactly I need proof of concept

[@muletechnologyacademy-zero5625]

MADHU N can you please let me know what poc you are looking for?

[@madhun5418]

Create an API with post method to call thirdparty api and return the same response. Flow - HttpListner(post method) Transfromation HttpRequester Logger

[@madhun5418]

Can you explain that scenario sir?

[@muletechnologyacademy-zero5625]

dzone.com/articles/integrating-okta-oauth-20-oidc-with-mulesoft-anypo