<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic API Provider - Authentication type - Only two options in Integration Forum</title>
    <link>https://community.sap.com/t5/integration-forum/api-provider-authentication-type-only-two-options/m-p/14066302#M27</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;when creating a new API Provider I have only the choice to select a "None" or "Basic" &lt;SPAN&gt;Authentication&amp;nbsp;type.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Jerome87_0-1743757262160.png" style="width: 400px;"&gt;&lt;img src="https://community.sap.com/t5/image/serverpage/image-id/246716iECAE84E024FAFCC6/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Jerome87_0-1743757262160.png" alt="Jerome87_0-1743757262160.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Why there are only those two options?&lt;/P&gt;&lt;P&gt;However, in the SAP BTP - Connectivity - Destination Area I have the choise of much more Authentication options.&lt;/P&gt;&lt;P&gt;Why is there a diffrence?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Jerome87_1-1743757547200.png" style="width: 400px;"&gt;&lt;img src="https://community.sap.com/t5/image/serverpage/image-id/246718iBA194B642A37F0AD/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Jerome87_1-1743757547200.png" alt="Jerome87_1-1743757547200.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;I need to setup a Connection to a Webservice with a Access (JWT) Token with the OAuth2 and client credentials flow.&lt;/P&gt;&lt;P&gt;Do I need to add this in the Policies of the corresponding API-Proxy ?&lt;/P&gt;&lt;P&gt;Best regards&lt;/P&gt;&lt;P&gt;Jerome&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 04 Apr 2025 09:15:30 GMT</pubDate>
    <dc:creator>Jerome87</dc:creator>
    <dc:date>2025-04-04T09:15:30Z</dc:date>
    <item>
      <title>API Provider - Authentication type - Only two options</title>
      <link>https://community.sap.com/t5/integration-forum/api-provider-authentication-type-only-two-options/m-p/14066302#M27</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;when creating a new API Provider I have only the choice to select a "None" or "Basic" &lt;SPAN&gt;Authentication&amp;nbsp;type.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Jerome87_0-1743757262160.png" style="width: 400px;"&gt;&lt;img src="https://community.sap.com/t5/image/serverpage/image-id/246716iECAE84E024FAFCC6/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Jerome87_0-1743757262160.png" alt="Jerome87_0-1743757262160.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Why there are only those two options?&lt;/P&gt;&lt;P&gt;However, in the SAP BTP - Connectivity - Destination Area I have the choise of much more Authentication options.&lt;/P&gt;&lt;P&gt;Why is there a diffrence?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Jerome87_1-1743757547200.png" style="width: 400px;"&gt;&lt;img src="https://community.sap.com/t5/image/serverpage/image-id/246718iBA194B642A37F0AD/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Jerome87_1-1743757547200.png" alt="Jerome87_1-1743757547200.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;I need to setup a Connection to a Webservice with a Access (JWT) Token with the OAuth2 and client credentials flow.&lt;/P&gt;&lt;P&gt;Do I need to add this in the Policies of the corresponding API-Proxy ?&lt;/P&gt;&lt;P&gt;Best regards&lt;/P&gt;&lt;P&gt;Jerome&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 04 Apr 2025 09:15:30 GMT</pubDate>
      <guid>https://community.sap.com/t5/integration-forum/api-provider-authentication-type-only-two-options/m-p/14066302#M27</guid>
      <dc:creator>Jerome87</dc:creator>
      <dc:date>2025-04-04T09:15:30Z</dc:date>
    </item>
    <item>
      <title>Re: API Provider - Authentication type - Only two options</title>
      <link>https://community.sap.com/t5/integration-forum/api-provider-authentication-type-only-two-options/m-p/14069701#M28</link>
      <description>&lt;P&gt;Even Cloud Integration doesn't support any JWT authentication out of the box for IFlows. Don't ask me why &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;&lt;P&gt;And API Management is just passing through the calls to the backend and you can apply policies to interfere with the call. What you are looking at is only the authentication to the catalog service, not to the API provider itself.&amp;nbsp;&lt;/P&gt;&lt;P&gt;I believe you have to create policies to create a JWT token on API Management and enrich the call with it (see &lt;A href="https://help.sap.com/docs/integration-suite/sap-integration-suite/json-web-tokens" target="_blank" rel="noopener"&gt;https://help.sap.com/docs/integration-suite/sap-integration-suite/json-web-tokens&lt;/A&gt;). Also for the Oauth authentication of the clients there are corresponding policies.&amp;nbsp;&lt;/P&gt;&lt;P&gt;By the way, this is the discussion section. It seems that the Q&amp;amp;A section has more engagement and is more suitable for questions, maybe you want to post the question there too:&amp;nbsp;&lt;A href="https://community.sap.com/t5/technology-q-a/qa-p/technology-questions" target="_blank"&gt;https://community.sap.com/t5/technology-q-a/qa-p/technology-questions&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2025 13:37:57 GMT</pubDate>
      <guid>https://community.sap.com/t5/integration-forum/api-provider-authentication-type-only-two-options/m-p/14069701#M28</guid>
      <dc:creator>philippeaddor</dc:creator>
      <dc:date>2025-04-08T13:37:57Z</dc:date>
    </item>
  </channel>
</rss>

