Apigee Edge SAML automated tasks

Google Cloud Apigee
1

I have an org integrated with SAML. I want to use maven scripts to upload proxies to that org. I have created a machine user for it and giving the username and password in the pom file but getting a 401 unauthorized error back. This is how the profile looks in the pom file that I am calling.

Please let me know if I am missing something out.

test test sandbox https://api.enterprise.apigee.com v1 ${org} ${username} ${password} https://.login.apigee.com/oauth/token oauth
2

When you have SAML activated the management API requires OAuth tokens and not Basic Auth. Please follow the instructions here.

https://github.com/apigee/apigee-deploy-maven-plugin#oauth-and-two-factor-authentication

1 Like
3

Thanks for the reply. If you see I am setting the authtype to oauth and also setting the token url with my zonename. This is the command that I call

mvn clean install -Ptest -Dusername=machine_org@zonename.com -Dpassword= -Dorg= -X

Even with this, I can see in the logs that the Maven script is using Basic auth for Authorization header. Should I be doing something else as well.

4

Hi @ChaitanyaRathi1 - Have you followed the steps mentioned here. Which method are you following, machine user or long token? Depending on that the Maven calls would differ. The profile xml above does not look correct. Can you share the exact code ?

5

Can you try calling this curl to see if you get a token response

curl -s -X POST [https://<zoneName>.login.apigee.com/oauth/token](https://<zoneName>.login.apigee.com/oauth/token) /
-H "Content-Type: application/x-www-form-urlencoded;charset=utf-8" /
-H "accept: application/json;charset=utf-8" /
-H "authorization: Basic ZWRnZWNsaTplZGdlY2xpc2VjcmV0"/
-d "grant_type=password&username=<machine_org@zonename.com>&password=<password>"

Does this give you a valid response with a token ?

6

HI @Sai Saran Vaidyanathan . I am following the steps in the given link and have got the machine user created which I am using to generate the OAuth token. But when I do it from the maven script I get a 401 error back. Can you please tell what is incorrect in the script. Also, can you please tell what code should I share.

7

Hi @Sai Saran Vaidyanathan. I am able to generate an OAuth token when I call the token API with my zone name from Curl or Postman. When I use the maven script is when I get a 401 error back.

8

Hi.. Can you share your email Id ? (missing in your community profile). Or else, please drop me an email (ssvaidyanathan@google.com)

9

Which version of the plugin are you using ?

10

I meant the code of your you shared in your question.

11

I am using version 2.3 of the maven plugin.

12

I have sent you an email.

13

Was referring to the Apigee maven plugin you are using for deployment

<plugin>
  <groupId>io.apigee.build-tools.enterprise4g</groupId>
  <artifactId>apigee-edge-maven-plugin</artifactId>
  <version>?</version> <!-- Latest is 1.1.5 -->
</plugin>
14

The version number is 1.0.2

15

That could be the reason, please update the version and check. Also confirm the machine user is added in the apigee org (Admin → Users) and has a role assigned that has access to deployment

16

The issue got resolved after updating the version number and by adding and assigning the created machine user to a given role in the Apigee org.

17

Awesome !!! Can you please accept the answer as well