Technical configuration

Before using the H5 SDK Data Comparison Across Tenants application, you must set up the ION API suite to get monitored tenants. Perform the configuration in this order:

  1. Download credentials for the ION API bridge.
  2. Create the ION API suite.
  3. Configuring the primary tenant.
  4. Optionally, configuring the IPC tenant.

Downloading credentials for the ION API bridge

Use this procedure to create the bridge between the main tenant, which is the lower tenant such as DEV and the monitored tenants, which are the higher tenants such as TST and PROD.
  1. Sign in to the main tenant and perform these steps:
    1. In the Applications, select OS > API Gateway.
    2. Select Configuration > General Settings.
    3. In the ION API JWK Management section, click the Add icon.
    4. Download the added JWK key.
  2. Sign in to the monitored tenant and perform these steps:
    1. In the Applications, select OS > API Gateway.
    2. Select Authorized Apps.
    3. Click the Add icon.
    4. Specify this information:
      Name
      Specify the main tenant name. For example, Tenant_Master - Authorization
      Type
      Select Backend Service.
      Description
      Provide a description. For example, API Bridge.
      Use Bridge Authentication
      Select this option.
      User Impersonation
      Select this option.
      ID Translation
      Select this option.
    5. Click Upload Public Key and upload the downloaded JWK key from the main tenant.
    6. Click Save.
    7. Click Download Credentials.
    8. Select Create Service Account.
    9. Specify this information:
      Select the User Management property for ID translation
      Select User Principal Name (UPN).
    10. Click DOWNLOAD.

Creating the ION API suite

Use this procedure to define monitored tenants as target endpoints.

If the application is configured for the Data Comparison Across Tenants, reuse the existing application; otherwise, create a new application.

  1. Sign in to the monitored tenant and perform these steps:
    1. In the Applications, select OS > API Gateway > Available APIs.
    2. Click Infor M3.
    3. In the Endpoint column, search M3/m3api-rest/v2/execute.
    4. In the Documentation column, click the File icon.
    5. In the OperationID column, search CMS975MI.
    6. In the Documentation column, click the File icon.
  2. Copy the Endpoint and Base URL values to use for the Target Endpoint URL value in the next step.
  3. Sign in to the main tenant and perform these steps:
    Note: If you are using an existing suite, skip substeps b to d.
    1. In the Applications, select OS > API Gateway > Available APIs.
    2. Click +Add.
    3. Click + Create New
    4. Specify this information:
      Application Name
      Provide a name for the application. For example, Data comparison across Tenants.
      API Context
      Specify M3EQP. This context is used to identify the ION API suite.
      Note: If a suite with context M3EQP exists, select the existing suite or create a new suite.
      Suite Name
      Provide a name for the suite. For example, Data comparison across Tenants.
      Suite Icon
      To select an icon, click Choose Icon. To upload an image from your local drive, click Upload.
      Description
      Provide a description. For example, Feature Status Monitored Tenants Tenant_MonitoredA and Tenant_MonitoredB.
    5. In the Target Endpoints tab, click the Add icon.
    6. Specify this information:
      Target Endpoint URL
      Specify the combination of the Endpoint and Base URL that you have created in the previous step. Follow this format:

      https://host/MonitoredTenant/M3/m3api-rest/v2/execute/

      Example:

      https://mingle-cqa-ionapi.cqa.inforcloudsuite.com/TENANT_ID/M3/m3api-rest/v2/execute/

      Note: Ensure that there is v2 before /execute.
      Target Endpoint Description
      Provide a description. For example, Tenant_MonitoredA - Execute Bridge.
      Proxy Context
      Specify the proxy context in this format: Bridge/Tenant_Name/Execute, where the Tenant_Name is the tenant identification to show in the SDK.

      For example, Bridge/Tenant_MonitoredA/Execute.

      Proxy Security
      Select OAuth 2.0.
      Authentication Type
      Select IONAPI Bridge.
    7. Click Load File and upload the downloaded credentials from the monitored tenant.

      See topic on Downloading credentials for the ION API bridge.

    8. Specify this information:
      Subject Type
      Select User Principal Name (UPN).
  4. Click Save.

Configuring the IPC tenant

Use this procedure to configure the IPC tenant.
Note: This procedure is optional.
  1. Login to the IPC tenant.
  2. Go to OS > API Gateway > Authorized apps.
  3. Click the + icon to add a new application.
  4. Specify this information:
    Name
    Provide a name for the application. For example, Data_comparison_app.
    Type
    Select Backend Service.
    Description
    Provide a description for the application. For example, app to connect from data compassion sdk.
    Use Bridge Authentication
    Enable this setting.
  5. Click the save icon before the Name field.
  6. Look for the Secret field and beside it, click Download Credentials.
  7. For the Download Credentials dialog, perform these action items:
    1. Enable the Create Service Account setting.
    2. In the Full Name field, select the IPC tenant username.
    3. Click DOWNLOAD to download ionapi file.
  8. Open the downloaded file and retrieve these values for the configuration of the master tenant.
    • ci
    • cs
    • saak
    • sask

Configuring the primary tenant

Use this procedure to configure the master tenant.

  1. Login to the primary tenant.
  2. Go to OS > API Gateway > Available APIs.
  3. Select an existing suite created for data comparison.
  4. Under Endpoints tab, click the + icon to add a new endpoint.
  5. Specify this information:
    Target Endpoint URL
    Provide the URL copied from the tenant.
    Proxy Context
    Specify in format Bridge/IPC_<Tenant>/Execute.

    Replace <Tenant> with the tenant ID or name and for IPC tenant, IPC_ prefix is required.

    Proxy Security
    Select OAuth 2.0.

    Under the Target Endpoint Security section, specify this information:

    Authentication type
    Select OAuth 2.0.
    Token Endpoint

    From the downloaded ionapi file, copy and join pu + ot to make a single endpoint.

    Example:

    https://mingle-sso.inforcloudsuite.com:443/M3IADSE001_DEV/as/token.oauth2.

    Grant Type
    Select Resource Owner.
    User Name

    From the downloaded ionapi file, copy the value of saak.

    Password
    From the downloaded ionapi file, copy the value of sask.
    ClientID
    From the downloaded ionapi file, copy value of ci.
    Client Secret
    From the downloaded ionapi file, copy value of cs.
  6. Click the save icon.