TDM - Fabric Credentials

Add Fabric Roles on each User's Group

The TDM GUI application is pre-integrated with Fabric Web Framework. The user logins into the Fabric Web Framework and Fabric authenticates the user. The TDM GUI application gets the user id and the user's Fabric roles from the user's session.

The user groups are defined in the organization's SP and must be defined in advance in Fabric as Fabric roles. Each Fabric role must get ALL_WS permission to enable the role's users to open and view the TDM windows.

Assuming a one-to-one relation between a user group and a Fabric role.

Of course each Fabric role can get different set of permissions. For example, a tester role must not have an access to an API and creates or edits TDM Business Entities (BEs).

Access TDM APIs Outside the TDM GUI

Do the following to access TDM APIs outside the TDM GUI:

  1. Create a secured API key in Fabric.
  2. Attach a Fabric role with AUTH_CLAIMS permission to the secured API key. This permission is needed to add the user id and the groups to the JWT claim.
  3. The external system generates a JWT token signed by the secret key of the secured API. This JWT can be sent as a Bearer token to Fabric APIs including the TDM APIs.
  4. The TDM API can get the user and their Fabric roles (=user groups) from the Fabric user session.

Click for more information about Fabric Web Services Security.

Previous

TDM - Fabric Credentials

Add Fabric Roles on each User's Group

The TDM GUI application is pre-integrated with Fabric Web Framework. The user logins into the Fabric Web Framework and Fabric authenticates the user. The TDM GUI application gets the user id and the user's Fabric roles from the user's session.

The user groups are defined in the organization's SP and must be defined in advance in Fabric as Fabric roles. Each Fabric role must get ALL_WS permission to enable the role's users to open and view the TDM windows.

Assuming a one-to-one relation between a user group and a Fabric role.

Of course each Fabric role can get different set of permissions. For example, a tester role must not have an access to an API and creates or edits TDM Business Entities (BEs).

Access TDM APIs Outside the TDM GUI

Do the following to access TDM APIs outside the TDM GUI:

  1. Create a secured API key in Fabric.
  2. Attach a Fabric role with AUTH_CLAIMS permission to the secured API key. This permission is needed to add the user id and the groups to the JWT claim.
  3. The external system generates a JWT token signed by the secret key of the secured API. This JWT can be sent as a Bearer token to Fabric APIs including the TDM APIs.
  4. The TDM API can get the user and their Fabric roles (=user groups) from the Fabric user session.

Click for more information about Fabric Web Services Security.

Previous