LDAP/SSO integration with APIGEE public Cloud

[khaldoune-ezzam]

Hi,

I'd like to know if it is possible to integrate APIGEE Cloud with corporate user registries (LDAP) or with OAuth providers / IDPs?

Thanks

[nagashree_b]

@khaldoune ezzamiti, AFAIK, Apigee provides LDAP integration only for the on-prem version (private cloud), through the LDAP policy.

if your corporate LDAP/ IDP provider APIs are accessible publicly (highly unlikely as organizations restrict it to the intranet), you can try the following:

1. you can use service callout or custom JAVA code to make calls to the LDAP/IDP APIs.

2. You can have a node.js proxy which can access the external LDAP/IDP APIs (if you do not want to use custom code and service callouts) and then use proxy chaining to make calls to the node.js proxy for the integration.

[khaldoune-ezzam]

Hi @Nagashree B

Thanks for your answer. From a VPC point of view, if we have an Interco, than it's ok for LDAP APIs.

But, my question was about the APIGEE Edge and the Portal users, not the Backends.

Any idea?

Thanks.

[sidd-harth]

As mentioned by Nagashree, LDAP policy is available only in Apigee Edge for Private Cloud.

https://docs.apigee.com/api-platform/reference/policies/ldap-policy

Apigee Public Cloud is just a trial version and maintained by Apigee, so we cannot do much. In Public cloud, we have basic Nodejs based Developer portal which again doesnt support LDAP AFAIK.

If you go with Private cloud you can use LDAP policy and you can also use Drupal based Developer portal which can be integrated with LDAP/SSO.

https://docs.apigee.com/api-platform/faq/drupal-portal-faq#how-do-i-use-ldap-for-authentication