Skip to Main Content
Integration


This is an IBM Automation portal for Integration products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


ADD A NEW IDEA

API Connect

Showing 312 of 2284

Password Policy for CMC and APIM

We want strict password policy requirement on CMC and APIM as we can do in DataPower Gateway in RBM settings.
about 1 year ago in API Connect 3 Under review

Peering configuration should use DNS instead of IP or static host

API gateway peering configuration should support DNS settings for other peers instead of IPs or alias . this will add more flexibility to peering in Openshift and Kubernetes without the need of IBM shipped scripts (gateway-peering.js) to wait the ...
11 months ago in API Connect 0 Future consideration

Failed deployment not noticed by API Manager

We noticed that the API Manager is able to "successfully" deploy APIs to the API Connect Gateway Service which Object Status never gets "Up" for some reason. The reasons differ but i think it would be much better to have this feedback in the API M...
about 2 years ago in API Connect 2 Future consideration

kid not added to the header of a JWT token generated with a jwt-generate policy

The kid (key identifier) parameter that should optionally be added to the JOSE header of a JWT token, isn't instead added to a JWT token by using a jwt-generate policy and declaring the kid in the JWK used in the policy configuration. In other wor...
over 5 years ago in API Connect 1 Future consideration

Fix TLS MITM attack vulnerability

The datapower gateway (that acts as a client in a TLS handshake) does not check if the domain name of the endpoint URL can be matched against the CN or the SAN in the certificate (despite the TLS profile we configure explicitly states to do that)....
over 3 years ago in API Connect 0 Future consideration

Remove x-ibm-attributes in OpenAPI Spec file that can be downloaded in dev portal

The OpenAPI spec file downloaded from dev portal it still contains x-ibm extension attributes. Could you please remove the x-ibm attribute and the x-key-type attribute in the api spec that is provided for download?
about 3 years ago in API Connect 0

API Connect rate limiting is missing yearly plan. It currently support only for weekly plan at max. Being an enterprise gateway solution provider APIC should be extended to support yearly plans for rate-limit.

As business is growing for the client I am working, they expect APIC as a gateway for entire api traffic at enterprise level to provide yearly plans for rate limiting customers.
8 months ago in API Connect 2 Not under consideration

Support multiple portals on the same host

In API Connect 2018.x, for OVA installations, there is no support for creating multiple portals sites. This means we need to create different portal subsystems on different hosts.
about 5 years ago in API Connect 1 Functionality already exists

Warning for unused definitions in API Designer

In API Connect v5 warnings came up when validating an API with unused definitions in the API Designer. We need this feature also in API Connect v10.
about 1 year ago in API Connect 0 Future consideration

Support implicit grant user token revocation without requiring client secret

PMR/Case#TS002847290 The current behavior is when token revocation of OAuth product is called, it requires client credentials. Without client secret, revocation URL throws 401 error. The Implicit grant token endpoint should support token revocatio...
over 4 years ago in API Connect 1 Future consideration