unity-idm-discuss

[Unity-idm-discuss] Add remote IdP using API

[Nikolaos E. <ni...@ad...>]

Hello Krzysztof,

The scenario is that a service register users using API calls. I have created an entity using API calls and I wonder if it’s possible to add a remoteIdP and translationProfile.

Best Regards,
Nick

Re: [Unity-idm-discuss] Add remote IdP using API

[Krzysztof B. <kb...@un...>]

Hi,

W dniu 16.03.2018 o 12:19, Nikolaos Evangelou pisze:
> Hello Krzysztof,
>
> The scenario is that a service register users using API calls. I have created an entity using API calls and I wonder if it’s possible to add a remoteIdP and translationProfile.
>
No, adding translation profiles is not exposed by REST admin. Regarding 
'remoteIDP' - it depends on what you mean by that?

In any way do you need to add translation profile to register users?

Best
Krzysztof

Re: [Unity-idm-discuss] Add remote IdP using API

[Nikolaos E. <ni...@ad...>]

Hello Krzysztof,

We are developing a new platform and the users must register to 3 different services (service A, service B and B2ACCESS). So we don’t want the user to register in 3 different services and we are trying to register the user at once. In that way the user will fill a single form and he will be registered in the background. Now service A, will be added as IdP to B2ACCESS in the future and this is where the remoteIDP and translation profile are needed to be added to the user’s account. Any idea how we will achieve this?

Regards,
Nick

> On 17 Mar 2018, at 01:39, Krzysztof Benedyczak <kb...@un...> wrote:
> 
> Hi,
> 
> W dniu 16.03.2018 o 12:19, Nikolaos Evangelou pisze:
>> Hello Krzysztof,
>> 
>> The scenario is that a service register users using API calls. I have created an entity using API calls and I wonder if it’s possible to add a remoteIdP and translationProfile.
>> 
> No, adding translation profiles is not exposed by REST admin. Regarding 'remoteIDP' - it depends on what you mean by that?
> 
> In any way do you need to add translation profile to register users?
> 
> Best
> Krzysztof

Re: [Unity-idm-discuss] Add remote IdP using API

[Krzysztof B. <kb...@un...>]

Hi Nikolaos,

W dniu 19.03.2018 o 08:52, Nikolaos Evangelou pisze:
> Hello Krzysztof,
>
> We are developing a new platform and the users must register to 3 different services (service A, service B and B2ACCESS). So we don’t want the user to register in 3 different services and we are trying to register the user at once. In that way the user will fill a single form and he will be registered in the background.
Sounds good.

> Now service A, will be added as IdP to B2ACCESS in the future and this is where the remoteIDP and translation profile are needed to be added to the user’s account. Any idea how we will achieve this?
I'm not sure what do you mean here. Translation profile is not added to 
user's profile, nor remoteIDP is. If you want to allow the user to use 
the service then you have to add it to its group of authorized users 
(what can be done with REST call or via registration process above).

Best,

Krzysztof

Re: [Unity-idm-discuss] Add remote IdP using API

[Nikolaos E. <ni...@ad...>]

Hello Krzysztof,

What I mean is when I register to b2access using my orcid account (through the form in web UI) and get entity information using the restAPI I get this response:

	{
            "comparableValue": "XXXX-XXXX-XXXX-XXXX",
            "confirmationInfo": {
                "confirmationDate": 0,
                "confirmed": false,
                "sentRequestAmount": 0
            },
            "creationTs": 1518000192796,
            "entityId": XXX,
            "remoteIdp": "https://pub.orcid.org/oauth/token",
            "translationProfile": "orcidProfile",
            "typeId": "identifier",
            "updateTs": 1518000192796,
            "value": “XXXX-XXXX-XXXX-XXXX"
        }

Would it be possible to register a user using the restAPI instead of the web form? If so, how could I set the remote idp and the translation profile?

Regards,
Nick


> On 19 Mar 2018, at 18:55, Krzysztof Benedyczak <kb...@un...> wrote:
> 
> Hi Nikolaos,
> 
> W dniu 19.03.2018 o 08:52, Nikolaos Evangelou pisze:
>> Hello Krzysztof,
>> 
>> We are developing a new platform and the users must register to 3 different services (service A, service B and B2ACCESS). So we don’t want the user to register in 3 different services and we are trying to register the user at once. In that way the user will fill a single form and he will be registered in the background.
> Sounds good.
> 
>> Now service A, will be added as IdP to B2ACCESS in the future and this is where the remoteIDP and translation profile are needed to be added to the user’s account. Any idea how we will achieve this?
> I'm not sure what do you mean here. Translation profile is not added to user's profile, nor remoteIDP is. If you want to allow the user to use the service then you have to add it to its group of authorized users (what can be done with REST call or via registration process above).
> 
> Best,
> 
> Krzysztof
> 

Re: [Unity-idm-discuss] Add remote IdP using API

[Krzysztof B. <kb...@un...>]

Hi Nikolaos,

W dniu 26.03.2018 o 13:28, Nikolaos Evangelou pisze:
> Hello Krzysztof,
>
> What I mean is when I register to b2access using my orcid account (through the form in web UI) and get entity information using the restAPI I get this response:
>
> 	{
>              "comparableValue": "XXXX-XXXX-XXXX-XXXX",
>              "confirmationInfo": {
>                  "confirmationDate": 0,
>                  "confirmed": false,
>                  "sentRequestAmount": 0
>              },
>              "creationTs": 1518000192796,
>              "entityId": XXX,
>              "remoteIdp": "https://pub.orcid.org/oauth/token",
>              "translationProfile": "orcidProfile",
>              "typeId": "identifier",
>              "updateTs": 1518000192796,
>              "value": “XXXX-XXXX-XXXX-XXXX"
>          }
>
> Would it be possible to register a user using the restAPI instead of the web form? If so, how could I set the remote idp and the translation profile?
>
 From what you wrote it seems that you want to create the "same" 
identity as the pasted one, and the problem is with setting the identity 
*metadata* remoteIdp and translationProfile, correct?
If so then no, you can't set it via rest (and with anything else). 
Similarly as you can not set creationTs and updateTs. This is metadata 
about the identity, which is set automatically by Unity to provide 
context information mostly admin oriented about the origin of element. 
For instance if you create identity using rest call (or clicking in 
AdminUI) translation profile is not used so won't be set.

HTH,
Krzysztof