Apigee OAuth onbehalf of (OBO) flow

[Sivakrishna_G]

• The OAuth 2.0 On-Behalf-Of flow(OBO) serves the use case where an application invokes a service , which in turn needs to call another service API. In apigee , is there any way to implement the propagate the delegated user identity and permissions through the request chain.

[API-Evangelist]

Assuming that you are referring to https://datatracker.ietf.org/doc/html/rfc8693#appendix-A.2 ?

If that's the use case then Yes. You can follow the spec & implement Delegation token exchange - step by step using the out of the box policies which apigee supports.

Will help you along the way if you have questions.