B2C Service - Setup IDCS OAuth token to access the Connect REST API

Hi,

In this post, I will discuss how to setup IDCS confidential app and B2C Service to access the Connect REST API with OAuth token. You will find it useful if you have use case like Authorize API access via OAuth.

Here are the details -

1. Setup IDCS confidential app

a. Client ID and Secret

Note - Client ID will be used when we create Staff Account in B2C Service

b. Resources including primary audience and scope

 c. Client Configuration including certificate and scope

2. Setup B2C Service profile - Create a profile for the OAuth user that has the SSO Login (SAML 2.0) permission set under Administration permissions

3. Setup B2C Service Staff Account - Create a staff account for the OAuth user (with IDCS Client ID) and assign the OAuth user profile to it.

Now you are all set. You can use tools like cURL to verify if you can access REST API with IDCS token.

Let me know if any feedback.

Thanks,

Adam Liu