Custom Identity Provider sample

This repository contains a basic sample of Custom Identity Provider to be used with Mobile Client Access service for IBM Bluemix. Note that this is a basic sample with hardcoded credentials set. It can be used to learn the basics of Custom Identity Providers implementation.

The Mobile Client Access service allows to create a custom identity provider and implement your own authentication logic of collecting and validating credentials. A custom identity provider is a web application that exposes a RESTful interface. You can host custom identity provider on premises or on IBM Bluemix. The only requirement is that the custom identity provider must be accessible from the public internet so that it can communicate with the Mobile Client Access service.

Before we begin

The following instructions assume that you're familiar with Mobile Client Access service and Custom Identity Provider interface. In order to get more information regarding these topics please use below links

Running this sample on IBM Bluemix

This sample is a simple Node.js application that implements a Custom Identity Provider interface. In order to run it on Bluemix you will need to have an IBM Bluemix account and CF toolchain installed.

Sign up for IBM Bluemix

Login to IBM Bluemix

Install and learn how to use CloudFoundry CLI

Start by cloning this sample to your local development environment.

git clone https://github.com/ibm-bluemix-mobile-services/bms-mca-custom-identity-provider-sample.git

Examine the app.js file. You will notice the hardcoded user repository at the very top. These are the credentials you will be able to login to your mobile application with once you configure Mobile Client Access to use this Custom Identity Provider
Update manifest.yml file, change the host and name properties. The host property defines your application host once it will be deployed to Bluemix, therefore it must be globally unique. The name property defines the application name in your current space.
Use cf push command to deploy your app to Bluemix.
Application deploy might take couple of minutes. Once application is successfully deployed you will see the url which application can be accessed by. The url is comprised of the host property you've defined in manifest.yml and mybluemix.net domain, e.g.

https://my-custom-identity-provider.mybluemix.net
Try browsing to the url of your custom identity provider in your desktop browser. You should see the following message, it indicates that the app was depoyed successfully

This is not the URL you're looking for

Configuring Mobile Client Access service

To configure your Mobile Client Access service to use a newly deployed Custom Identity Provider. Open the Mobile Client Access Dashboard and enable Custom Authentication.
Use any alphanumerical string as Realm name. Keep a note of Realm name, you will need it to configure authentication in the Mobile Client Access SDK later.
Use the URL of a previously deployed Custom Identity Provider as URL

For more details about configuring Mobile Client Access service and mobile apps to use Custom Identity Providers and read this documentation article.

License

=======================

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.

You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.