Access IDM custom endpoints without access token

[venuarathi]

Hi,

Is there an option to protect custom IDM endpoints created in ForgeRock Identity Cloud without generating an access token, when apps try to call these endpoints.

Thanks and Regards
Arathi

[edward.johnson]

Hi @venuarathi

Thanks for reaching out to the Community!

Please review the documentation provided below as potential options for your request. Let us know if these are not suitable for your situation.

1. Configuring IG to protect IDM:

Protecting IDM with IG

Instructions for configuring IG to protect IDM. Updated for the ForgeRock 6.5 platform. Introduction IDM includes a rich set of REST APIs capable of performing many actions. Given the broadness of this set, you might want to limit the REST APIs available to public networks. To do this, use an API gateway to act as a reverse proxy, so only the requests the gateway is configured to allow are sent to IDM. API gateways offer many powerful options for authentication and authorization that are not …

2. The use of the ForgeRock SDK to develop request interceptors and apply them to outbound requests from your applications.

https://backstage.forgerock.com/docs/sdks/latest/sdks/customize/how-to-customize-requests.html

Warm Regards,
Ed