For partners that build or integrate commercially available applications and service solutions with the Oracle Cloud Platform
For partners that provide implementation or managed services around Oracle Cloud Applications
We have federated the Oracle Cloud Apps with Identity Cloud, in this case do you have any reference blogs or documentation to configure authentication service in Oracle Digital Assistant to be used.
Comment
DOes this help - its not exactly what you are looking for
https://blogs.oracle.com/mobile/techexchange%3a-how-to-use-the-systemoauthaccountlink-component-to-perform-authorized-access-to-protected-rest-endpoints
Alternatively
https://docs.oracle.com/en/cloud/paas/digital-assistant/use-chatbot/backend-authentication.html#GUID-8A7B4703-61C9-4F63-B0DA-14FC6A935ADC
Be the first to rate this
|
Sign in to rate this
Be the first to rate this
|
Sign in to rate this
I have configured Authentication Services with my IDCS, i am able to make it work in "Postman" get access token though in ODA, it keeps failing with message invalidate redirect url. I see ODA is dynamically adding this redirect_url which i dont recognize and find from where it is coming
redirect_uri=https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/v1/callback
Appreciate any help on this..
Be the first to rate this
|
Sign in to rate this
I am using System.OAuth2AccountLink not really finding much on this..
Be the first to rate this
|
Sign in to rate this
Hi,
you can verify the redirect URI by checking the channel webhook. E.g you go to channels and create a "fake" webhook. This then shows what the callback base URI would be. So you should see
https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/...
The /v1/callback is then added to the connectors part as the callback to send from IDCS after successful authentication (its only used for authentication after which you receive an authorization token. This token is sent to the callback).
As common in OAUTH2, the redirect URL needs to be registered with the client application in IDCS to prevent fraud. So to do this
1. Go to your client application Oracle IDCS
2. Select the Configuration tab
3. Find the Redirect URL field and paste your redirect URL
e.g. Enter the callback URL in the Redirect URL field as shown below, replacing the host name in the example with the one that you copied from the webhook URL
most likely: https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/v1/callback
4. Save the changes
Note: The client application is where you got all the authentication service configuration from. If you use the default one created then this is
BOTSExternalAPIOAuthClient_<your-instance-name>
After registering the redirect URL, it should work
Note: The documentation for this is in:
https://docs.oracle.com/en/cloud/paas/digital-assistant/use-chatbot/backend-authentication.html#GUID-ACA78921-5D7C-4CA5-900F-62B522ECBD4B
which is linked from the ODA docs for the System.OAuth2LinkAccount component
https://docs.oracle.com/en/cloud/paas/digital-assistant/use-chatbot/built-components-properties-transitions-and-usage.html#GUID-0A91AC81-0DED-408D-A4BE-18F70F8BB4B9
Frank
Be the first to rate this
|
Sign in to rate this
Thanks Frank for detailed and quick response. I got OAuth2 working with Authentication Service setup, trick was I updated redirect url to "https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/v1/callback"in the IDCS application setup. I am using web channel, i have not setup any channel as "webhook" yet, in the web channel configuration page there is no field to show URL. My question:
#1: What is this URL https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/v1/callback is this constant for all ODA instance as i dont see this URL anywhere in my enviornment
#2: for authentication services to work, do i need to configure webhook channel? i have configured web channel only
#3: how do we know when token expires so that we fire refresh token
Appreciate your help.
Be the first to rate this
|
Sign in to rate this
#1: What is this URL https://botv2frk1I0090H4EF788bots-mpaasocimt.botmxp.ocp.oraclecloud.com:443/connectors/v1/callback is this constant for all ODA instance as i dont see this URL anywhere in my enviornment
- The URL is for the whole instance, yes
#2: for authentication services to work, do i need to configure webhook channel? i have configured web channel only
You don't need a webhook. Its only to look up the internal callback URL
#3: how do we know when token expires so that we fire refresh token
The documentation link I copied in my initial answer has this explained.
https://docs.oracle.com/en/cloud/paas/digital-assistant/use-chatbot/built-components-properties-transitions-and-usage.html#GUID-0D4443BA-E4A5-40C8-97F7-069E566B7D93
You don't get notification. Its that the protected resource rejects the custom component request. You then use the OAUTH component to get a new. If you set the Refresh Token option then users don't need to re-authenticate
Frank
Be the first to rate this
|
Sign in to rate this
thank you Frank, got it. I am on my way... we are working to push ODA based assistant for all our SaaS clients..... to effective manage the "OPERATE" phase
Be the first to rate this
|
Sign in to rate this
Be the first to rate this
|
Sign in to rate this