AAA, OAuth, and OIDC in IBM DataPower V7.5 - ZE753G

Description

A common requirement for DataPower services is to authenticate the sender of a message, and authorize that sender to request the message’s behavior. The AAA action within DataPower provides the basics of the “authenticate, authorize, and audit” support.

OAuth is an authorization framework that defines a way for a client application to access server resources on behalf of another party. It provides a way for the user to authorize a third party to their server resources without sharing their credentials. DataPower supports OAuth specifications and protocols, and can provide an OAuth web token service.

OpenID Connect (OIDC) is an authentication layer that runs on top of an OAuth 2.0 authorization framework. DataPower can operate as an OIDC client.

In this course, you learn how to use the configuration options and processing actions to add the AAA support to a service, implement an OAuth 2.0 scenario, and add OIDC support.

Hands-on exercises give you experience working directly with an IBM DataPower gateway. The exercises focus on skills such as configuring a AAA action, configuring a web token service, and creating an OIDC client.

For information about other related courses, see the IBM Training website:

http://www.ibm.com/training

If you are enrolling in a Self Paced Virtual Classroom or Web Based Training course, before you enroll, please review the Self-Paced Virtual Classes and Web-Based Training Classes on our Terms and Conditions page, as well as the system requirements, to ensure that your system meets the minimum requirements for this course. http://www.ibm.com/training/terms

Course introduction
Authentication, authorization, and auditing (AAA)
Exercise: Configuring authentication and authorization in a service
OAuth overview and DataPower implementation
Exercise: Defining a three-legged OAuth scenario that uses DataPower services
Social Login support in DataPower
Exercise: Implementing an OIDC client
Course summary

Aim

Describe the AAA framework within the IBM DataPower Gateway
Explain the purpose of each step in an access control policy
Configure a AAA action to enforce authentication and authorization policies that are in a AAA information file and in an LDAP server
Describe the OAuth 2.0 framework
Explain the role that a DataPower gateway performs in an OAuth 2.0 framework
Configure the DataPower objects that are used for OAuth 2.0 interactions
Define Social Login
Describe how to configure Social Login in DataPower
Configure an OIDC client

Participant requirements

Before taking this course, you should successfully complete course Essentials of Service Development for IBM DataPower Gateway V7.5 (WE751G) or Essentials of Service Development for IBM DataPower Gateway V7.5 (ZE751G). You should also be familiar with AAA, OAuth 2.0, and OIDC concepts.

Participant

This course is designed for integration developers who configure service policies on IBM DataPower Gateways.