Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 shoyeb khan (shoyebkhan)
Cognizant Technologies

Cognizant Technologies
IN
shoyebkhan Member since 2013 5 posts
Cognizant Technologies
Posted: Mar 16, 2017
Last activity: Mar 17, 2017
Posted: 16 Mar 2017 4:50 EDT
Last activity: 17 Mar 2017 5:00 EDT
Closed

OAuth 1.0 configuration steps for Connect-REST Authentication Profile

Hi,

I have to call a Connect-REST provided by external organisation's service (MasterCard MATCH) using the OAuth security. Where I am configuring OAuth CLient 1.0 in Pega 7.1.9.

Consumer Key: I have received from the external organization

Shared Secret Key: Where can i get it or should i generate in pega?

Signature Method: service provider told to use 'RSA Sha1' but pega provides 'HMAC Sha1'. can i go ahead and use HMACSha1?

Request Token URL: From where can i get this? is this the End Point URL?

Authorization URL: From where can i get this? is this the End Point URL?

Access Token URL: From where can i get this? is this the End Point URL?

And are there any steps i need to follow to complete the process of authentication and run the service?

Thanks

To see attachments, please log in.
Data Integration
Security

Posted: 8 years ago
Posted: 17 Mar 2017 2:36 EDT
Penchalanarasimhulu Vendipalli (Narasimha522)
PEGA
Senior Technical Solutions Engineer
Pegasystems Inc.
IN

Hi Please follow the below steps:

 

Enter the details of the OAuth 1.0 provider in this section.

Field

Description
Provider name Select the OAuth 1.0 provider from the drop-down list. The system generates the values for the rest of the fields in this section according to your selection.
Request token URL The request token URL that is specified in the API guide of the external application that you want to connect to. You can access this URL to obtain a request token. Modify the URL if needed.
Authorization URL

The authorization URL that is specified in the API guide of the external application. You can use this URL to obtain authorization from the external application by using the request token. Modify the URL if needed.

Show More

Hi Please follow the below steps:

 

Enter the details of the OAuth 1.0 provider in this section.

Field

Description
Provider name Select the OAuth 1.0 provider from the drop-down list. The system generates the values for the rest of the fields in this section according to your selection.
Request token URL The request token URL that is specified in the API guide of the external application that you want to connect to. You can access this URL to obtain a request token. Modify the URL if needed.
Authorization URL

The authorization URL that is specified in the API guide of the external application. You can use this URL to obtain authorization from the external application by using the request token. Modify the URL if needed.
Access token URL The access token URL that is specified in the API guide of the external application. You can access this URL to obtain an access token. You can access private resources in the external application by using this token. Modify the URL if needed.

Consumer identification

Enter additional details that you require to access private resources in the external application that supports OAuth 1.0.

Field

Description
Consumer key Required. Enter the consumer key that is provided by the external application.
Shared secret key Required. Enter the consumer secret that is provided by the external application.
Signature method

Select the signature method that you want to use to sign the request to the external application.

  • HMACsha1 computes a hash-based message authentication code (HMAC) using the SHA1 hash function.
  • PLAINTEXT computes a text-based message authentication code.

Show Less
To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice