How to set client id when making a service callout to pingfederate to authorize an access token

Google Cloud Apigee
1

I am trying to call Ping Federate from Apigee using certificate authentication to authorize a token that was generated by Ping Federate

I have set up Ping and both Apigee with the certificate

My service callout is below. The thing I am missing is how to set the Ping Federate client id in my service callout

<ServiceCallout async="false" continueOnError="false" enabled="true" name="Service-Callout-1">
    <DisplayName>Service Callout-1</DisplayName>
    <Properties/>
    <Request clearPayload="true" variable="myRequest">
        <Set>
            <QueryParams>
                <QueryParam name="token">{access_token}</QueryParam>
                <QueryParam name="token_type_hint">access_token</QueryParam>
            </QueryParams>
            <Verb>POST</Verb>
        </Set>
    </Request>
    <Response>pingTokenValidationResponse</Response>
    <HTTPTargetConnection>
        <Properties/>
        <URL>https://PING_FEDERATE/as/introspect.oauth2</URL>
        <SSLInfo>
            <ClientAuthEnabled>true</ClientAuthEnabled>
            <Enabled>true</Enabled>
            <KeyAlias>test</KeyAlias>
            <KeyStore>test</KeyStore>
            <TrustStore>test</TrustStore>
        </SSLInfo>
    </HTTPTargetConnection>
</ServiceCallout>
2

Hi Tara. I think I can help you.

You said

The thing I am missing is how to set the Ping Federate client id in my service callout

How should the client id get propagated? Does Ping expect it in a header? a query param?

If in an query param, then you just need another element. If in a Header, then you need to add a element, similar to the element, and a single element within that.

3

Hi Tara,

How did you resolve this issue. I am getting same issue. but i am constructing the service properly.

I was able to configure 2 way SSL between Apigee and Tomcat. where as i am getting issue while configuring with pingfed.

Thanks,

Venu