Skip to main content

We Have Moved

The IBM Application Gateway has a new home -

The documentation on this site will no longer be maintained after v21.02, please update your bookmarks.


The example yaml file provided below contains a basic YAML configuration for an IBM Application Gateway (IAG) container which:

  1. Specifies a server certificate;
  2. Configures an IBM Security Verify tenant as the OAuth introspection endpoint;

Example Yaml File

version: "21.02"

# Configure an IAG container with a very basic configuration.  This 
# configuration will simply define a server certificate, and configure an IBM 
# Security Verify tenant as the OAuth introspection endpoint.

# Specify a server certificate to be used by the container.  The server 
# certificate was created using an openssl command:
#  openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 \
#        -out cert.pem
# To remove the dependency on external files a base-64 representation of the
# key.pem and cert.pem files can be embedded within this yaml, where the 
# base-64 encoded file is prefixed with 'B64:', for example: 
#   "B64:PGhy4KICAgIDxoND5...."
# If no certificate is specified a self-signed certificate will be 
# automatically created and used by the container.

        - "@cert.pem"
        - "@key.pem"

# Specify an IBM Security Verify tenant as the OAuth introspection endpoint for 
# the container.  Please note that the values provided below are for 
# illustrative purposes only and don't reflect a real tenant.  A free tenant 
# can be created using the instructions found at the following URL:

  - name: Verify
      - +*
    client_id: c10e5e0b-1019-49b8-b7e2-600af9310e010
    client_secret: t21bxcYY92
    introspection_endpoint: ""
    mapped_identity: "{sub}"
    multi_valued_scope: true
    restricted: false
    token_type_hint: access_token
    auth_method: client_secret_post