Add an Authorization server - Intergraph Smart Materials - 2.3 - Installation & Upgrade - Hexagon

1. On the Home page, click Security > API > Authorization Servers > Add Authorization Server.

2. Type the Name, Audience, and Description and then click Save.

   Setting	Description	Example
   Name	The name of the authorization server	Smart Materials Web API
   Audience	This is a GUID generated using the GUID website http://new-guid.com. Ensure both hyphens and upper case in the GUID is followed. You must keep a record of the generated GUID as it is used as part of authorization server.	71FC520E-78DA-4EA7-96C1-164EA13FD5DO
   Description	The description of the authorization server	Smart Materials Web API

Set server custom scopes

This procedure allows you to setup the server custom scopes after the Authorization server is created.

1. On the Home page, Click Authorization Servers.

2. Select the authorization server that you just created, For example, Smart Materials Web API.

3. Select the Scopes Tab, and then click Add Scope.

4. In Name, enter the GUID (refers to Audience in the above steps).

   In Default scope, don't select Set as a default scope.

Set server custom claims

1. On the Home page, Click Authorization Servers.

2. Select the authorization server that you just created, For example, Smart Materials Web API.

3. Select the Claims Tab, and then click Add Claims.

4. In the Add Claims, set the claims as shown in the following example.

   If a value exists for the element sub then user needs to add only email.

   Name	Value	Scopes	Type	Included
   sub	(appuser != null) ? appuser.userName : app.clientId	Any	access	Always
   email	appuser.email	Any	access	Always

5. Click Create.

Set the server access policy

1. On the Home page, Click Authorization Servers.

2. Select the authorization server that you just created, For example, Smart Materials Web API.

3. Select the Access Policies tab, and then click Add Policy.

4. Type the Name and Description.

5. Select The following clients and then type the required client name (refers to the application name created earlier) .

6. Click Create Policy.

Set the server rule

1. On the Home page, Click Authorization Servers.

2. Select the authorization server that you just created, For example, Smart Materials Web API.

3. Select the Access Policies tab, and then click Add Rule.

   Rules allow for configuration of the token expiration based on the selected Grant Type, User and Scope.

4. Provide all the required fields, and then click Create Rule.

5. Click Settings tab and make a note of the Audience and Issuer information. This information is required to configure the Smart Materials Web API.