Creating an API Token in VCF Operations 9.1 using SSO Account

In our last blog we discussed how to create a general API Client/Token to be used to access the VCF Operations 9.1 API. This blog will detail how to create an API Token for an SSO User.

First, log into VCF Operations using your SSO credentials.

Once logged in click the user icon top right.

Click Generate API Token.

Click GENERATE.

Give it a Name, TTL, Description and click GENERATE API TOKEN.

You now have your token, OIDC Issuer URL, and Token Endpoint URL, which you will need to exchange the token you've already generated for a Bearer Token to be used with the Operations API. In my case, the command to do that looks like this.

curl -k --request POST \

  --url https://vc-mgmt-a.site-a.vcf.lab/acs/t/CUSTOMER/token \

  --header 'content-type: application/x-www-form-urlencoded' \

  --data grant_type=urn:custom:vcf:params:oauth:grant-type:api-token \

  --data api_token=your_vidb_token_goes_here

This will return the following:

{"scope":"openid profile user email group","access_token":"your_bearer_token_will_be_here","token_type":"Bearer","expires_in":1799}

You can then use this Bearer Token to authenticate with the VCF Operations 9.1 API.

Used in a call it would look like this:

curl -X 'GET' \

'https://your_ops_fqdn_goes_here/suite-api/api/resources?page=0&pageSize=1000&_no_links=true' \

-H 'accept: application/json' \

-H 'Authorization: Bearer your_bearer_token_goes_here'

Hope this was helpful, enjoy!