Long-running edgemicro with SAML / machine ID using token

[michael-wottle]

We have recently enabled SAML for our orgs and are now using machine IDs to start up the edgemicro instances.

We now request an access token for the machine ID, then use that token to call edgemicro configure. The output of the configure command will return a client key and secret. the key and secret are used to start the server, which makes a connection to the Apigee servers to pull configuration information.

We want to make sure that the connection made using the key and secret will not become stale when the access token expires. Basically, we will be spinning up servers that may run for long periods (many days / months) and we want to know how the key and secret is used to authenticate the connection to the Apigee API servers to pull down.

• Do the client key and secret expire at some point?
• Could a long running edgemicro instance eventually stop receiving configuration changes from the server?
• What is the best practice for long-running edgemicro instances? Should we call edgemicro reload occasionally?
• If so, do we need to re-call edgemicro configure to get a new key and secret?

[Former Community Member]

@michaelwottle

The key and secret is independent of the access token and does not expire when the management api access token does.

The key and secret issued for MG does not expire. It can be revoked by an administrator, but they do not expire.

edgemicro already polls Apigee Edge for changes (default is 10 min interval; configurable). As long as MG can reach Edge, it will continue to receive configuration changes. Under most circumstances, you do not need to call reload manually.

[michael-wottle]

OK, so what authentication mechanism use used to authenticate the edgemicro process to the Edge services, basic auth?

[Former Community Member]

the key and secret is used via basic auth via TLS, yes.

[shivamahalingam]

Hi @michaelwottle

Do you have any documentation pointing towards configuring SAML with edgemicro i do not find it.

Thanks,

Shiva