+3I am trying to use the Rest API in IFS 10. Currently I am struggling with the authentication. I have found various posts which some say you can use basic authentication, others say it must be oAuth. However using basic I am constantly receiving a 401 Unauthorized, i can’t find any official documentation explaining how to authenticate using oAuth.
Can anybody help?
Thanks
Best answer by Charith Epitawatta
Hi
Please have a look at following article that explains how to invoke REST endpoints using Postman with basic authentication:
The reason you are getting the 401 error should be because you haven’t added the projection to compatibility application type.
For OAuth2, you can read this informative article written by
https://dsj23.me/2021/01/08/ifs-authentication-flow-with-oauth-and-openid-connect/
Hope this helps!
+31Hi
Please have a look at following article that explains how to invoke REST endpoints using Postman with basic authentication:
The reason you are getting the 401 error should be because you haven’t added the projection to compatibility application type.
For OAuth2, you can read this informative article written by
https://dsj23.me/2021/01/08/ifs-authentication-flow-with-oauth-and-openid-connect/
Hope this helps!
+3Perfect, solved the issue - thanks!
Only note for future viewers, using a cloud hosted demo IFS10 instance when I clicked on the Compatibility API Doc it asked me for username/password. However the only difference seems to be the URL, default is “main”, compatibility type is “int”. Switching this made everything work.
+31Hi
I am glad you were able to make it work.
It would be worth being aware of security implications of using compatibility application type too, so let me add some info about that as well.
Enabling compatibility application type exposes the projection to be used with basic authentication. By default, only projections of Integration category are exposed through basic authentication.
For projections that do not have this enabled by default, it should be done selectively when OAuth is not an option and after carefully considering the network security as well. Basic authentication is a legacy technology and does not meet current security or compliance requirements, therefore it is advised to use OAuth as much as possible.
You can find this in following documentation as well:
Hope this helps!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.