Let the platform do the work

/Administration/settings/idmMode POST

Overview

[ADMIN] Turn IDM-mode on.

Summary

This endpoint switches IDM mode on. This endpoint is only available to administrators when IDM migration is turned on and intended for internal use for IDM integration.

Request to enable IDM-mode.

{"idmMode": 
    {
        "enabled": true,
        "clientId": "mangoOIDCClientId",
        "clientSecret": "mangoOIDCClientSecret",
        "stsUrl": "http://sts.sugarcrm.local",
        "idpUrl": "http://login.sugarcrm.local",
        "stsKeySetId": "mangoOIDCKeySet",
        "tid": "srn:cloud:idp:eu:0000000001:tenant",
        "crmOAuthScope": "https://apis.sugarcrm.com/auth/crm",
        "requestedOAuthScopes": ["offline", "https://apis.sugarcrm.com/auth/crm", "profile", "email", "address", "phone"],
        "cloudConsoleUrl": "http://console.sugarcrm.local",
        "allowedSAs": ["srn:cloud:iam:us-west-2:9999999999:sa:user-sync"]
    }
}

Refer to multiverse documenation for parameters explanation.

Response when IDM mode has been enabled

{
    "tid": "srn:cloud:idp:eu:0000000001:tenant",
    "clientId": "mangoOIDCClientId",
    "clientSecret": "mangoOIDCClientSecret",
    "stsUrl": "http://sts.sugarcrm.local",
    "idpUrl": "http://login.sugarcrm.local",
    "redirectUri": "http://sugar",
    "urlAuthorize": "http://sts.sugarcrm.local/oauth2/auth",
    "urlAccessToken": "http://sts.sugarcrm.local/oauth2/token",
    "urlResourceOwnerDetails": "http://sts.sugarcrm.local/oauth2/introspect",
    "urlUserInfo": "http://sts.sugarcrm.local/userinfo",
    "http_client": [],
    "cloudConsoleUrl": "http://console.sugarcrm.local",
    "cloudConsoleRoutes": [],
    "caching": [],
    "crmOAuthScope": "https://apis.sugarcrm.com/auth/crm",
    "requestedOAuthScopes": [
        "offline",
        "https://apis.sugarcrm.com/auth/crm",
        "profile",
        "email",
        "address",
        "phone"
    ],
    "keySetId": "mangoOIDCKeySet",
    "urlKeys": "http://sts.sugarcrm.local/keys/mangoOIDCKeySet",
    "allowedSAs": ["srn:cloud:iam:us-west-2:9999999999:sa:user-sync"]
}

Change Log

Version Change
v11_2 Added /Administration/settings/idmMode POST endpoint.