In your multi-tenant ION API

  1. Select Authorized Apps from the ION API menu.
  2. Click Add.
  3. Name your authorized app, for example: ION API Bridge Backend Service
  4. Select Type: Backend Service.
  5. Provide a Description.
  6. To allow for user impersonation, select User Impersonation.
  7. To allow for ID translation, select ID Translation.
  8. Select Upload Public Key.
    Navigate to the IONAPI-Bridge-Public-JWT.json downloaded from your single-tenant/on-premises ION API in the previous section. Key ID, Key Value, and Algorithm are populated from the IONAPI-Bridge-Public-JWT.json upload.
  9. Click Save. The client ID and secret are generated.
  10. Select Download Credentials.
  11. Select Create Service Account.
  12. Select a User Management Property for ID Translation.
    Note: This is the cross reference (XRC) and is what the ION API Bridge subject will be matched against.
  13. Click Download and save your ION API Bridge Backend Service.ionapi file to a secure location.
  14. Select Available APIs from the ION API menu.
    1. Choose an API suite.
    2. Within the suite details, copy the endpoint to be bridged.
  15. Return to your single-tenant/on-premises ION API to complete the remaining configuration steps.