API Provider - Authentication type - Only two options

[Jerome87]

Hello,

when creating a new API Provider I have only the choice to select a "None" or "Basic" Authentication type.

Why there are only those two options?

However, in the SAP BTP - Connectivity - Destination Area I have the choise of much more Authentication options.

Why is there a diffrence?

I need to setup a Connection to a Webservice with a Access (JWT) Token with the OAuth2 and client credentials flow.

Do I need to add this in the Policies of the corresponding API-Proxy ?

Best regards

Jerome

[philippeaddor]

Even Cloud Integration doesn't support any JWT authentication out of the box for IFlows. Don't ask me why 🙂

And API Management is just passing through the calls to the backend and you can apply policies to interfere with the call. What you are looking at is only the authentication to the catalog service, not to the API provider itself. 

I believe you have to create policies to create a JWT token on API Management and enrich the call with it (see https://help.sap.com/docs/integration-suite/sap-integration-suite/json-web-tokens). Also for the Oauth authentication of the clients there are corresponding policies. 

By the way, this is the discussion section. It seems that the Q&A section has more engagement and is more suitable for questions, maybe you want to post the question there too: https://community.sap.com/t5/technology-q-a/qa-p/technology-questions