This documentation is for WSO2 API Manager 1.7.0 View documentation for the latest release.
Page Comparison - Maintaining Primary and Secondary Logins (v.1 vs v.2) - API Manager 1.7.0 - WSO2 Documentation

All docs This doc

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

In a standalone deployment of the API Manager instance, users of the API Store can have a secondary login name in addition to the primary login name. This gives the user flexibility to provide either an email or a user name to log in. You can configure the API Store to treat both login names as belonging to a single user. Users can invoke APIs with the same Accestoken without having to create a new one for the secondary login. 

You can configure this capability using the steps below.

  1. Configure user login under the <OAuth> element in <APIM_HOME>/repository/conf/identity.xml file.
    1. Mention your primary and secondary login names. Set the primary attribute of the primary login to true and the primary attribute of the secondary login to false.
    2. Primary login doesn't have a ClaimUri. Leave this field empty.
    3. Provide the  correct  ClaimUri value for the secondary login

    An example is given below:

    Code Block
        ..... . ....
            <UserIdLogin primary="true">
            <EmailLogin primary="false">
  2. In the API Store of a distributed setup, the serverURL element in the api-manager.xml file should point to the key manager instance's service endpoint. This allows users to connect to the key manager's user store to perform any operations related to API Store such as login, access token generation etc. For example,

    Code Block
       <!--Server URL of the Authentication service -->
       <!-- Admin username for the Authentication manager. -->
       <!-- Admin password for the Authentication manager.-->
  3. In the distributed setup, API Store's user store needs to point to the key manager user store.


Keeping the secondary login name unique for each user is the user's responsibility.