Skip to content

Overview

This document highlights the OAuth sample application which was developed using the services that are set up on Volt MX Foundry. The OAuth application allows users to log in using various social identities and then invoke a few sample services from each provider. The OAuth application demonstrates the capability of Volt MX Foundry to successfully manage the backend tokens automatically and inject them into the subsequent integration service calls.

The purpose of this sample is to highlight the Volt MX Foundry Identity Services for authentication and how it secures and manages backend tokens when using other Volt MX Foundry Integration Services.

Volt MX Foundry Identity Services provides various identity connectors to integrate into existing enterprise’s identity providers and/or social identities such as Google, Facebook, etc. In addition to providing simple identity connectors, the Volt MX Foundry Identity Service also provides robust backend security token management and automatically manages those tokens and adds the tokens to outgoing subsequent API invocations. This allows the client app to avoid the complexity and security risk of managing backend security tokens.

The following Figure 1 shows the logical architecture of the Volt MX Foundry Identity Services. The Identity Manager connects to backend identity sources and receives one or more backend security token. The identity manager then generates a Volt MX Foundry Token for the client that is a signed JSON Web Token (JWT) token. Then the client makes an API call to other Volt MX Foundry services using the Volt MX Foundry Token and the Identity Service will automatically manage backend tokens as required.

Figure 1: Volt MX Foundry End to End Identity Management

The OAuth sample app and the backend Volt MX Foundry services that are discussed in this user guide focus on using the Volt MX Foundry Identity to connect to social identities via OAuth and then using Volt MX Foundry Integration to invoke OAuth-protected APIs to return user specific data from that provider.

Audience

This manual is intended for developers and IT professions using or intending to use Volt MX Foundry to build, integrate and deploy mobile applications across multiple channels and invoke back-end services that require OAuth authentication.

Overview of the OAuth Application

The OAuth application includes five identity services for Facebook, Microsoft, Box, LinkedIn, and Volt MX OAuth for authenticating the user within the client app. These identity services are then used by the integration services to invoke the provider APIs with the acquired OAuth access token. The screen shots of the sample app are below. In this example, the user selects to log in using their LinkedIn credentials. The app displays their user profile and enables them to share a link using the OAuth protected REST APIs exposed by LinkedIn.

Prerequisites

Service Configuration Detail

This section covers the details of the configuration of the Box identity service that comes along with the instance of the Volt MX Foundry. Volt MX Foundry is preconfigured with the certain service providers. They are Facebook, LinkedIn, Microsoft, Instagram, Amazon, Yahoo, and Box Identity services. In this section, you will learn only about configuring the Box Identity service.

For the Box provider, the identity service authenticates using the Box OAuth provider. In this example, the integration service is integrated with the Google Calendar service to retrieve a user’s events. The following section will walk you through the Google Identity Service and the Google Integration Service configuration.

Log in to Volt MX Foundry

  • Navigate to the URL for Volt MX Foundry sent to you in your email after you registered for the Volt MX Foundry. Click the URL, and the Volt MX Foundry log-in screen for your cloud appears. To log in to the console, type in the username and password for Volt MX Foundry that was provided in the email.

Applications

Once you log into Volt MX Foundry, the application screen appears as shown below.

Click on the Apps icon that is shown below to see the list of all applications that are currently installed in Volt MX Foundry.

The screen shows the icon of OAuth Sample application.

  • Click the voltmxSampleOAuth Sample application to review the services that will be used in the client application.

Volt MX Foundry Integration Services

After you click on the voltmxSampleOAuth icon, seven tabs that you can configure appear in the console. They are identity, integration, orchestration, objects, logic, offline sync, and engagement. This section will focus on the following tabs:

  • The Identity tab helps you configure identity providers such as Active Directory, OAuth, SAP, and other as identities that can quickly map to each of your orchestrations and integrations.
  • The Integration tab allows you to configure back-end services as mobile optimized services.
  • The Orchestration service helps you combine integration services into a single service. An orchestration service reduces the need to make multiple calls from the mobile application that slow the performance of the mobile application. 

VoltMX Foundry Box Identity Service

This section provides the details of the Box’s identity service which is set up in the Volt MX Foundry that will connect to Box backend using the OAuth protocol. The following are the steps to review the Box’s Identity service.

  1. Click VoltMXSampleOAuth to display all the configuration details of the OAuth application.

  2. The Identity tab of the Configuration details appears by default and all the identity services that are set up display. Click BoxOauth to review the identity service that is set up for Box.

  3. In the BoxOauth identity details screen, the name of the identity service appears in the Name field. The Type of Identity is Box.

    The Provider Details section provides the details of the back-end enterprise provider, which is Box in this case. The Authorize End Point is the URL that will be used to authorize with Box. The Token End Point is the end point to retrieve the tokens from Box. The Callback URL is the callback URL of the Volt MX Foundry that will be used by Box for callback functionality. This call back URL must be used when configuring the OAuth provider clientID. These values along with the OAuth client id and client secret must be obtained from the OAuth provider.

  4. In the Advanced section of the identity screen, you will see the details that you must provide to fetch the user profile. The URL field displays the URL that will be used to fetch the user profile. The Resource Authentication Scheme field indicates that the authentication information will be in the header of the request. The Profile Request Method field indicates that Get method is used to fetch the profile information.

    Click Test Login to test the identity service that has been set up.

  5. A Grant Access dialog box appears. You must grant permissions to the Identity service. Note the list of permissions shown. More permissions can be added from the Box developer account.

  6. After the successful log in, you will see a message Log in successful. You will also see that the profile information of the user from Box is retrieved and is displayed in the Identity Response.

Volt MX Foundry Box Integration Service

This section provides the details of the Box’s integration service that is set up in the Volt MX Foundry that will connect to Box backend and retrieve the user’s Box folders and files list. The following are the steps to review the Box Integration service.

  1. After logging into the Volt MX Foundry and click VoltMXSampleOAuth application ( shown as 1 below). This will display all of the application details.

  2. Click the Integration (shown as 2 below) tab to review all the integration services that have been set up.

  3. Click BoxServicesList to review the details of this integration service.

  4. You will notice that Service Definition is selected by default. The Name will contain the name of integration service. The Client Authentication shows that the previously created identity service will be used with this integration service. This is how Volt MX Foundry Identity knows which backend token to automatically add the OAuth access token from Box Login into the outbound call to the OAuth protected REST APIs.

  5. Click Operations List to review the list of all the operations.

  6. Click get_folders_folderId operation to review the operation details.

  7. The Name displays the name of the service. The Operation Security Level indicates that the user has to be authenticated to invoke the service. The Http Method indicates that HTTP GET will be used to retrieve the data from the backend service. The Target URL will be used to retrieve the data from the backend.

  8. In the Advanced section of the operation details, you will notice that Request Input is selected by default. Also in the Body, you will notice that there is a folderId filed with a test value. This value of the parameter will get appended to the URL to invoke the service.

    At the bottom of the page, select a test environment and click on Save and Fetch Response to test the operation and the fetch the data.

  9. Once the token is generated and the operation is successfully invoked, you will see the response as shown below.

  10. Click Response Output to review the XPath mappings that were created for this operation.

    Click Test to test the mappings.

Configuring Volt MX Foundry OAuth Service

In this section, you will learn how to configure developer accounts of Facebook, Box, Google, LinkedIn, and Microsoft with Volt MX Foundry’s OAuth services. The Volt MX Foundry comes with preconfigured identity services to connect to various identities however you can follow the steps below to create your own social identity credentials with various identity providers like Microsoft, Google etc. and then use those credentials to configure the services in Volt MX Foundry.

Configuring Microsoft Developer Account

  1. Log in to https://apps.dev.microsoft.com. Click Sign in to log in into the account.
    Click Test to test the mappings.

  2. Enter the Email and Password, shown as 2 in the image below. Click Sign In to log in to the account, shown as 3 below.

  3. Click Add an App (shown as 4 ) to add a new application in your developer account.

  4. Enter the name of the application in the Name text field ( shown as 5). Click Create Application ( shown as 6) to start the creation of the application.

  5. Click Add Platform ( shown as 7) to select the platform that the application is targeted for.

  6. Select the platform as Web (shown as 8 below) as the application will be targeted to the web platform.

  7. Next, you will need to log in to your instance of Volt MX Foundry to retrieve some information that is needed to configure this app that you are creating in https://apps.dev.microsoft.com.

    Log in to the Volt MX Foundry and click Apps to display all the apps that are configured in the Volt MX Foundry.

  8. Click VoltMXSampleOAuth application (shown as 10) to view the services that are configured for this application.

  9. Click MicrosoftLogin service ( shown as 11) to review the service details.

  10. Copy the Callback URL (shown as 12) as you need this to configure the app that is created on https://apps.dev.microsoft.com

  11. Enter the Redirect URI (shown as 14) in the web platform section of the application. Click Add URI to add the URI to the application.

  12. Click Generate New Password (shown as 15) to generate the password for the application. The password generated is displayed in a dialog box.

  13. Copy the Application Id (shown as 16) and the Password (shown as 17). Click OK (shown as 18) to close the dialog box.

  14. Click Save (shown as 19) to save the configuration of the application on the Microsoft website.

  15. Log in to the Volt MX Foundry if not already done. Access the MicrosoftLogin service of the VoltMXSampleOAuth application. In the Client Id (shown as 20) and the Client Secret fields, (shown as 21) enter the Application Id and the Password that were generated earlier on https://apps.dev.microsoft.com.

    Click Test Login to test the service with the new Client Id and Client Secret.

  16. Next, you will see a screen as below, where you must enter the password (shown as 23) of the Microsoft account that was created. Enter the password and click Sign In (shown as 24) to sign into your account.

  17. After successful log in using the credentials entered in the earlier step, the details of the account are displayed by the service that is set up in Volt MX Foundry. Click on the cross mark (shown as 25) to close the window.

  18. Click Save to save the configuration of the MicrosoftLogin service with the new Client Id and Client Secret.

Configuring Google Developer Account

This section of the document discusses the details of the Google developer account along with the associated client Id and Client Secret. You can use this client Id and client secret to configure the identity service of Google with your own account information.

  1. Enter https://console.developers.google.com in your browser. Enter the email address in the text box (shown as 1 below).

  2. After your successful log in, click I agree (shown as 2 below) to allow Google to make changes to your account.

  3. Click Create Project (shown as 3 ) to begin the creation of the new project. You must create a new project to get the required credentials to configure the app.

  4. Enter the New Project name (shown as 4) and click Create (shown as 5) to begin the creation of the project.

  5. Click on Credentials (shown as 6) to begin the creation of the credentials for the application that was just created.

  6. Click the Create Credentials drop-down list and select API Key *( shown as 7) to begin the creation of the API Key for the application.

  7. After the API key is created (shown as 8 ), click Close (shown as 9) to close the pop-up dialog box.

  8. Click OAuth Client Id in the drop-down list to begin the creation of the OAuth Clint Id and client secret for the application that was created.

  9. Click Configure Consent Screen to continue the creation of the client id and secret.

  10. In the OAuth Consent Screenfield, enter the name of the application in the Product Name shown to users field(shown as 12). Click Save (shown as 13) to save the settings.

  11. Log in to your instance of Volt MX Foundry if not already done. Click Apps to see the list of all apps that are installed in the Volt MX Foundry instance. Click VoltMXSampleOAuth (shown as 15) to view the details of the application.

  12. Click on GoogleLogin(shown as 16) identity service to view the details of the service.

  13. In the details section of the identity service, make a note of the Callback URL(shown as 17) as this will be needed to configure the application that you are creating on the https://console.developers.google.com website.

  14. Select Web Application as the Application Type (shown as 18). Enter the Callback URL that was noted earlier into the Authorized Redirect URI(shown as 19) and click Create. This will create the client Id and client secret for the application created.

  15. Copy the Client Id and Client Secret (shown as 21). This client id and client secret will be used to configure the identity service in Volt MX Foundry.

  16. Log in to Volt MX Foundry if not already done. Select the GoogleLogin service and enter the Client Id (shown as 22) and Client Secret (shown as 23). Click Test Login(shown as 24) to test the service with the credentials entered.

  17. Click Allow (shown as 25) for the identity service to retrieve the details of your Google account.

  18. After the details are successfully retrieved the information will be displayed in the Identity Response section. Click on the cross mark (shown as 26) to close the window.

  19. Click Save to save the newly configured identity service.

Configuring LinkedIn Developer Account

This section of the document discusses the details of the creation of the LinkedIn developer account and the associated client Id and Client Secret. You can use this client Id and client secret to configure the Volt MX Foundry’s identity service of LinkedIn.

  1. Enter https://developer.linkedin.com/ in your browser. Click Sign In to create an account or log in to an existing account (shown as 1 below).

  2. Enter the email address and the password (shown as 2) for the LinkedIn account that was created.