Authentication using JWT in SAP API Management

faisaljamal1 — Wed, 04 Dec 2024 10:17:10 GMT

Hello Experts,

We are in a process of implementing OAuth(client credentials based) authentication to API proxies using the JWT verify policy in SAP API Management as described in this post. We used EntraID as IdP. We have been able to successfully implement and test it, but have an observation though.

We noticed during testing that token fetched for app registered for Dev environment is also working for authenticating with API proxy in SAP APIM Test environment, which is most likely because both the APIs (dev and test) are registered in a common EntraID.
But is this how it should work? Is there a way to ensure that token fetched for API in one environment does not works for APIs in another environment?

Any inputs will be appreciated. Thanks!

Regards,

Faisal

Re: Authentication using JWT in SAP API Management

faisaljamal1 — Tue, 17 Dec 2024 13:11:03 GMT

Hello Experts, any suggestions on this please?

Question Re: Authentication using JWT in SAP API Management in Technology Q&A

Authentication using JWT in SAP API Management

Re: Authentication using JWT in SAP API Management