Skip to Main Content
Integration


This is an IBM Automation portal for Integration products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


ADD A NEW IDEA

My ideas: API Connect

Showing 73

The ability to change used or revoked refresh tokens to be valid again

We are very dissapointed that we as an enterprise using apic v10 still cant control our customers refresh tokens and to manage its status if we need to . our customers from time to time needs us to change a revoked token to be valid and currently ...
about 1 year ago in API Connect 2 Not under consideration

Client Secret Rotation

API Connect application client id & secret don't expire so there is no way to force consumers to change it regularly. API Connect should provide either secret expiry or means to get the last password update date so that we can implement one on...
about 4 years ago in API Connect 1 Not under consideration

Automation utility for upgrading "invoke policy" in assemble editor while migrating from APIC v5 to v10

We have upgraded from APIC v5 to APIC v10 and have more than 300 APIs which used invoke policy in assemble editor in APIM . Since there is a new version of invoke policy available in v10, hence we wanted to upgrade all our APIs to use new version ...
over 1 year ago in API Connect 2 Not under consideration

Please Increase support payload size from less than 1MB to 5MB.

Responsed from ticket TS013622763 mentioned the maximum supported payload is less than 1MB. Could you please increase the supported payload from 1MB to 5MB in future release?
over 1 year ago in API Connect 2 Not under consideration

Defining a consumer org name using OIDC

Via this RFE we would like to request support to define a consumer organization name when using an OIDC user registry. To create a consumer organization in the API Manager you can choose between two options: "Create Organization" and "Invite organ...
over 4 years ago in API Connect 1 Not under consideration

Can you do any individual field level encryption like user id or password.

Hi Team, When we login to the developer portal site, we can see the username and password in the browser, and in firewall logs, the username and password should be in encrypted format. But in firewall logs, we can see username and password. As it ...
over 1 year ago in API Connect 2 Not under consideration

Mutual TLS certificate requirements per product

To enhance our security and meet the requirements of different API providers, we would like to see the following features for API products:1. Add a CA trust list per product2. Add a list of trusted certificate types (i.e. EV SSL, eIDAS, QWAC) When...
over 4 years ago in API Connect 1 Not under consideration

About response from APIC when invalid request received

Dear team, during security testing using APIConnect, we encountered a situation that we received 500 as the http response when sending a request with an invalid string inserted.I understand that the eval function is not evaluated by default, but f...
over 1 year ago in API Connect 2 Not under consideration

Parameterizing timeout value in invoke policy

Many of the fields in invoke policy are parameterized, which has enabled developers to create custom user defined policy & use invoke policies inside these user defined policies and implement their custom way of calling backend. However, not a...
over 3 years ago in API Connect 1 Not under consideration

Consumer login details in Portal site to be encrypted additionally(along with TLS/HTTPS)

Required a login details encryption in rest and transit additionally (along with TLS/HTTPS)
almost 2 years ago in API Connect 2 Not under consideration