Configure OIDC SSO between WSO2 API Manager v4.0.0 & Auth0 — Greetings Everyone!!! 👋 In this medium, we will be walking through how to configure OIDC SSO between WSO2 API Manager and Auth0. We will be using the WSO2 API Manager v4.0.0 for this demo Let’s break in… 🔐 Auth0 Before continuing with the SSO configurations in the WSO2 API Manager, there are a few configurations…

Guide: Generate Access Token with SAML Bearer Grant — Greetings Everyone !!! 👋 In this medium, I will be walking through how to configure and generate an access token in WSO2 API Manager using SAML Bearer Grant flow. As to demonstrate the flow and configurations, we will be using WSO2 API Manager v3.2.0 & WSO2 Identity Server v5.10.0 As out-of-the-box, the WSO2 API…

A Sample on Assigning Roles to Provisioned Users via Provisioning Handlers — Greetings Everyone!!! 👋 Have you ever come across a scenario, where you wanted to assign a set of custom roles (or the Internal roles of WSO2) to provisioned users, but don't have an attribute to perform role-mapping? If yes, then you are at the right place to get a solution for it. WSO2…

Blocking (Deny) Condition Publishing, Retrieval, and Validation Flows in WSO2 API Manager v2.6.0 — Greetings Everyone!!! 👋 In this medium, I will be presenting you an info-graphic illustrating the Blocking Condition publishing, retrieval, and evaluation process flow of WSO2 API Manager v2.6.0. In a brief, API Manager provides a platform to block the API requests at Gateway using Deny policies. The Deny policies (also known as Blocking…

Token Revocation Notification Flow in WSO2 API Manager v3.2.0 — Greetings Everyone!!! 👋 In this medium, I will be presenting you an info-graphic illustrating the Token Revocation Notification process flow of WSO2 API Manager v3.2.0. In a brief, API Manager v3.2.0 provides a new feature to revoke the Token caches in the Gateway node using Event-Driven architecture. Once the token is revoked by…

Preserve and Send the Authorization Header to the Backend Services — Greetings Everyone!!! 👋 In this medium, I will be walking-through a solution to preserve and send the Authorization Header to the Backend service at the (per) API level. APIs that are published through the WSO2 API Manager is protected by either OAuth2, Basic, or API Key tokens. As out-of-the-box, the API Manager server…

Key Validation & Subscription Validation Flow in WSO2 API Manager v3.2.0 — Greetings Everyone!!! 👋 In this medium, I will be presenting you an info-graphic demonstrating the Key Validation & Subscription Validation process flow of WSO2 API Manager v3.2.0. Giving a brief, in API Manager v3.2.0, the Key Validation and Subscription validations are performed at the Gateway node itself with the help of Event-Driven architecture…

Guide: Configure Federated OpenID Connect SSO Between Keycloak & WSO2 API Manager 3.2.0 — Greetings Everyone !!! 👋 In this medium, I will be 🚶walking through how to configure OIDC Federated Authentication & SSO flow between WSO2 API Manager 3.2.0 and Keycloak including JIT Provisioning. I will be focusing and providing the instructions to configure the API Manager Devportal. …

Configure and use Artifact Synchronization with GitHub in WSO2 API Manager — Greetings Everyone!!! 👋 Looping back again with another blog and a custom implementation specific to the Artifact Synchronization feature of the WSO2 API Manager. …