Get Shared Access Token for API Management, using Postman

Question

Get Shared Access Token for API Management, using Postman

SKate 136

I'm trying to run this POST in Postman to get the shared access token for API Management
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/users/{userId}/token?api-version=2021-08-01
I'm using the documentation from here.

Where in APIM can I find the value for "{userId}" ? The description says "User identifier. Must be unique in the current API Management service instance.", it doesn't describe where to get this value from.
What do I use for "api-version". The description says "Version of the API to be used with the client request.", where can I find this?
What do I set in Authorization, and in the Body, if anything.
Thank you

Answer accepted by question author

1 additional answer

Your answer

Answer 1

JananiRamesh-MSFT 29,436 Moderator

Hi @SKate Thanks for reaching out. From the description I understand that you were trying to get a shared access token for an user using a below request url
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/users/{userId}/token?api-version=2021-08-01

Get the user id by using the below rest api call
https://learn.microsoft.com/en-us/rest/api/apimanagement/current-ga/user/list-by-service?tabs=HTTP

API version : you can use latest api version (api-version=2021-08-01)

you need to pass the Bearer token in Authorization header and payload as below

Body:
{
"properties": {
"keyType": "primary",
"expiry": "2022-09-21T00:44:24.2845269Z"
}
}

please refer the below sample request:

let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

SKate 136 Reputation points

2022-09-01T13:32:12.69+00:00
Hi @JananiRamesh-MSFT ,

There are two REST APIs that provide management for APIM:

Resource Manager-based API

Direct management API

All Resource Manager-based API have URLs that start with https://management.azure.com.
All direct management API have URLs that start with a company-specific service name, followed by management.azure-api.net, for example:
https://contosoapi.management.azure-api.net

Both APIs have a different authentication mechanism.

In my calls with Postman, I was using Direct management API, and they were working. Then I added a custom domain to our APIM. I think that made the Access token set in Management API section of the portal invalid, so all calls stopped working.
Your answer helped me to realize that there is another API that can be used to manage APIM, and I was able to make calls you described, using that API.
I also realized that if I regenerate the Access token, my initial calls work too. But, the Management API URL does not get updated to the custom domain, so when I request SSO URL for a specific user, to automatically sign that user to the Developer portal, the response I get back takes that user to Deprecated Developer portal, that we don’t even have anymore. Is there a way to change that, should I create another issue specific to Direct management API and SSO URL response in case of custom domain?

Thank you for your help
JananiRamesh-MSFT 29,436 Reputation points Moderator

2022-09-06T03:47:31.06+00:00

Hi @SKate Thanks for getting back, Glad that you were able to resolve the issue with the above suggestions provided. This is a different question to the initial thread question, and I recommend you post as a new question in Q&A so that it would also help others in the community. We would gladly assist you in new thread.

Please let me know incase of further queries, I would be happy to assist you.

Answer 2

Efthimis Skouras 0

The bearer token should be the user's token that authenticates using delegation sign-in, right?

Share via

Get Shared Access Token for API Management, using Postman

1 additional answer

Your answer