This documentation is for WSO2 API Manager 1.9.0. View documentation for the latest release.

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


  1. Change the admin credentials in the <APIM_HOME>/repository/conf/user-mgt.xml file:

    Code Block
  2. Go to the Resources -> Browse menu in the management console to open the registry and update the credentials in /_system/governance/apimgt/applicationdata/sign-up-config.xml registry location.

Do you have any special characters in passwords?

If you specify passwords inside XML files, take care when giving special characters in the user names and passwords. According to XML specification (, some special characters can disrupt the configuration. For example, the ampersand character (&) must not appear in the literal form in XML files. It can cause a Java Null Pointer exception. You must wrap it with CDATA ( as shown below or remove the character:


Code Block


  1. Configure user login under the <OAuth> element in <APIM_HOME>/repository/conf/identityapi-manager.xml file.
    1. Mention your primary and secondary login names. Set the primary attribute of the primary login to true and the primary attribute of the secondary login to false.
    2. Primary login doesn't have a ClaimUri. Leave this field empty.
    3. Provide the  correct  ClaimUri value for the secondary login

    An example is given below:

    Code Block
        ..... . ....
            <UserIdLogin primary="true">
            <EmailLogin primary="false">
  2. In the API Store of a distributed setup, the serverURL element in the <APIM_HOME>/repository/conf/api-manager.xml file should point to the key manager instance's service endpoint. This allows users to connect to the key manager's user store to perform any operations related to API Store such as login, access token generation etc. For example,

    Code Block
       <!--Server URL of the Authentication service -->
       <!-- Admin username for the Authentication manager. -->
       <!-- Admin password for the Authentication manager.-->