Layer 7 CA API Gateway - Retrieve OAuth 2.0 token assertion is not found within OTK

Products

• CA API Gateway

Issue/Introduction

Despite mentions in the OTK documentation when looking for the assertion "Retrieve OAuth 2.0 Token" in a standard Gateway/OTK install it cannot be found.

Environment

Release: Any

Component: CA API Gateway / OAuth Toolkit (OTK)

Resolution

This assertion is installed as part of the Mobile API Gateway (MAG) and with MAG licensing

As a workaround create an encapsulated assertion to provide similar functionality. Attached is a sample policy provided as a guideline for doing so. The sample uses the client credentials grant type but can be modified to suit your needs.