Layer 7 API Management: Unable to view all OAuth clients in OAuth manager

Products

• CA API Gateway

Issue/Introduction

When viewing clients in the OAuth manager you are unable to see all of the registered clients even when assigned an administrator role on the Gateway.

 

Environment

Component: API Gateway OAuth Toolkit

Cause

By default there are only 3 user names that are considered as administrators within OAuth.

These are admin, pmadmin and administrator. User role assignment will not affect these permissions and any other accounts must be explicitly set in policy to be administrators.

 

Otherwise you will be restricted to only seeing clients that your ID has registered.

Resolution

For OTK 4.x you will need to edit the 'OTK User Attribute Look Up Extension'  policy.

 

1. Locate the following 'compare' assertion

2. Edit the compare assertion to include the name of the user you wish to make an administrator separating each id with the pipe character

3. Save and Activate the policy