IBM Data and AI Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data & AI organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com


Add a new idea Subscribe
Status Planned for future release
Workspace watsonx.data
Created by Guest
Created on Feb 23, 2024

RELATED IDEAS

Allow customer to use custom authentication to generate JWT

Related to idea WTNXDATA-I-33. Customer uses a certificate that is generated at login time. The watsonx.data (CP4D) control plane supports using a custom authentication service (https://www.ibm.com/docs/en/cloud-paks/cp-data/4.8.x?topic=users-enabling-authentication-against-custom-authentication-service) to be used in place of a bearer token when executing API calls to the platform. The request is to also support the custom authentication service to generate a zen JWT token (bearer token) that can then be used for subsequent API calls, or to login to Presto using JWT.

Needed By Quarter
  • Guest
    Reply
    |     Jun 26, 2024

    The following would be the process:

    • Business user logs into their workstation or VDI
    • The usual authentication mechanism using CA Siteminder (IdP) is run, combination of MFA and TOTP
    • The IdP generates a certificate which holds the user name, groups, locaion, etc.
    • Using the CP4D Custom Authentication handler, we want to issue a Zen JWT based on the certificate that was issued by the IdP

    GET 'https://${CPD_ROUTE}/api/v1/usermgmt/v1/usermgmt/user/${USER_ID}' \ -H '${CUSTOM_AUTH_HEADER}: ${USER_AUTH_KEY}'

    • Instead of the /api/v1/usermgmt/v1/usermgmt/user API call, a Zen JWT would be retrieved using another API call such as /icp4d-api/v1/authorize
    • This Zen JWT can then be used for platform API calls and also for JWT authentication to Presto as documented in WTNXDATA-I-33

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.