Cumulocity IoT Feedback Portal
Support OAuth2 between micro services and core services
Itron requires secure interaction between micro services and core services. This is mandated by our info Sec team.
The request is to enhance the security between micro services and core services leveraging common protocols.
Standard OpenID or OAuth2 would be preferred.
Clarification to this ticket.
The security concern observed is that the security protocols supporting the public API's for application users are not sufficient. We cannot leverage single sign-on for multiple customers and customers that are external to Itron.
We are looking for RCF 6749 support https://datatracker.ietf.org/doc/html/rfc6749)
Hi Andrew,
Thank you for taking the time to raise an Insight for Cumulocity. I wonder if you can help me understand what you mean by 'core services'. Microservices can only access services via the standard REST API to which all the security configuration for the platform is applied. There is no unsecured access.
Regards, Jane.