IBM Sustainability Software - Ideas Portal
Hide about this portal


This portal is to open public enhancement requests against the products and services belonging to IBM Sustainability Software. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace IBM Engineering - Foundation/Common Services
Categories Integrations
Created by Guest
Created on Aug 24, 2022

RELATED IDEAS

ELM - To Support Enterprise SSO with OAuth2.0 100%

See this idea on ideas.ibm.com

Since all of our in house Enterprise Lifecycle Collaboration tools make use of Enterprise SSO completely, we would like IBM ELM to behave the same way.


What is the being compatible to SSO OAuth2.0 completely?

As of today, ELM via JAS (Jazz Authorization Service) simply redirects to the Enterprise SSO for identity, but does not comply with OAuth2.0 standards of having or providing the access tokens from the Enterprise SSO, instead it generates it's own access tokens which makes it easier to work within the ELM ecosystem.


In the world of integrations within an Enterprise using OSLC or without OSLC, it is important for the Lifecycle Collaboration applications to adhere to standards and comply with Enterprise SSO in order to have a seamless integration (which is believed to be one of the USPs of IBM ELM product)


Possible approaches/things to do within ELM which could help in seamless integration within an Enterprise:

  • Have a Secure Token Service (STS) that manages and validates the access tokens from Enterprise SSO

  • Provide Introspection functionality with Enterprise SSO, so as whenever an Enterprise Application user is coming with an access token (Bearer Token), the user is authenticated with ELM

Idea priority Urgent
Needed By Quarter
  • Post comment
  • Guest
    Reply
    |     Sep 12, 2022
    Thank you for submitting this RFE. This appears to be a request to support STS (or similar) functionality to better support SSO in your environment. OAuth and SSO functionality is provided by the application server (WebSphere Liberty) so any changes would need to begin there. There might be additional adoption required by ELM depending on how Liberty might implement such a feature. We recommend you submit a similar RFE to Liberty to enable this functionality.

    This RFE will be closed as it should be directed towards Liberty.

    Thank you.

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.