Solved

How to automate login to universal to download deployment scripts

  • 1 April 2022
  • 6 replies
  • 117 views
E
Rank
Badge +9

We have deployed the Software Factory to Azure. With the new 2022.1 release we are unable to save the deployment .sql scripts. As workaround (or improvement) we can download the files from indicium (/iam/sf/code_file?$filter=project_id eq '<project>' and project_vrs_id eq '<project_version>' and code_file_generated_code ne null&$select=code_file_id, code_file_generated_code)

I would like to automate the download process, but struggle to get the login token from indicium.

How do i programmatically authenticate to indicium to download the deployment scripts?

 

icon

Best answer by Anne Buit 8 April 2022, 08:58

View original
This topic has been closed for comments

6 replies

E
Rank
Userlevel 6
Badge +16

Please check this reply from Vincent on a different topic. It describes how to do this with Microsoft Graph but the same can be applied to Indicium. You will first need to create an OpenID Client within IAM. 

https://community.thinkwisesoftware.com/integrations-90/microsoft-graph-authentication-1428?postid=9153#post9153

Also Dick has written a blog post about this please check this topic as well.

https://community.thinkwisesoftware.com/news-blogs-21/using-oauth-to-get-data-from-external-applications-2672

E
Rank
Badge +9

I have some trouble setting up the OpenID configuration in the software factory. After creating the OpenID configuration and restarting the indicium it fails to start with

Description: The process was terminated due to an unhandled exception.

Exception Info: Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException: Access is denied.

There is an ticket created in the TCP (3105S) for this also

A
Rank
Userlevel 6
Badge +10

@efitskie basically you can call the endpoint with any user that has rights to the SF, it is not perse necessary to go through the trouble of setting up OpenID.

E
Rank
Badge +9

The indicium error on Azure when setting up the OpenID configuration can be resolved by adding the app setting WEBSITE_LOAD_USER_PROFILE with value 1

With this setting the indicium will start.

Anne Buit
Rank
Userlevel 7
Badge +5

Following up on the comment by Arie, you can use a basic authentication header as long as the service account you are using for the integration is registered as an IAM account without 2FA enabled.

Username and password need to be encoded in this header.

e.g. Authorization: Basic Y2ljZC1zZXJ2aWNlLWFjY291bnQ6aHVudGVyMQ==

 

E
Rank
Badge +9

Thank you all for the contribution on this topic. I’ve managed to get the request working with basic authorization

Terms & ConditionsCookie settings