Multiple Tokens for the same resource owner/ client_id combination

Products

• CA API Gateway (Layer 7)
• SA94 to API SECURITY
• STARTER PACK-7
• CA Rapid App Security
• MOBILE API GATEWAY
• CA Mobile - API Gateway
• CA API Gateway

Issue/Introduction

How can multiple tokens be created for the same combination of resource owner and client_id?

Environment

Release:
Component: APIGTW

Resolution

Prior to OTK 4.1 if the same client id/resource owner combination was used to generate tokens it would remove the previously generated tokens and create a new one. As of OTK 4.1 you can now customize the number of tokens available to be generated from this combination.

To accomplish this:

1) Copy the variable max_oauth_token_count from the policy OTK Storage Configuration. 
2) Paste the variable in the hash fragment policy of the same name, #OTK Storage Configuration
3) Edit the value to reflect the maximum number of OAuth tokens per app and resource owner combination.