Calling a projection endpoint exposed through the Main Application in Postman returns a 401 Unauthorized even when using ordinary Aurena login/password credentials — what authentication mechanism does this endpoint actually expect?

All FAQ questions / Security and access

Answer

Projection endpoints exposed through the Main Application use OpenID Connect (built on OAuth 2.0) for authentication, not plain Basic Auth with your Aurena username/password — in Postman, that means selecting the OAuth 2.0 authorization type rather than Basic Auth. To configure it, you'll need details from the environment's OpenID discovery document (at https://<hostname>/openid-connect-provider/.well-known/openid-configuration) along with a Client ID and Client Secret obtained from the IFS Middleware Server's Admin Console. By contrast, projection endpoints exposed through the separate Integration cluster do use simpler Basic Auth, which is why the two access paths can behave differently for the same kind of request.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions