Skip to Main Content
Integration


This is an IBM Automation portal for Integration products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


ADD A NEW IDEA

Pinned ideas

View all
PINNED OpenAPI schema validation including headers
Currently to schema validate a REST based API in DataPower you have to extract the JSON schema from the OpenAPI file and then code manually code the individual header checks defined in the OpenAPI file Would be a vast improvement to be able to j...
PINNED supports ECDH-ES algorithms for JWE
Debit or credit card tokenizers (THALES / VISA / Etc.) implement JWE with ECDH as an encryption mechanism for sensitive data in the different flows applicable to wallets such as Apple Pay, GPay, etc. given its wide diffusion and easy adoption.

All ideas

Showing 2713

IIB dumps should be able to be suppressed by DAE

Dumps are not suppressed by DAE in IIB v9 or v10 (or presumably, IBM ACE). We had an issue where we were receiving 100+ dumps per day from IIB with no way to suppress them. Per IBM development:All attempts to enable the ability to suppress the IIB...
almost 4 years ago in App Connect 1 Future consideration

Enhance CORS customization to customize Allow-Control-Expose-headers

API Connect built-in CORS support does not allow customization of Allow-Control-Expose-Headers - so the standard headers alone (Cache-Control, Content-Language, Content-Length, Content-Type, Expires, Last-Modified, Pragma) would be available to Ja...
almost 4 years ago in API Connect 0 Future consideration

IBM IIB10 - Enable timeout capability connecting to Extreme Grid map

IBM IIB10 - Enable timeout capability connecting to Extreme Grid map. If Extreme grid is completely unavailable - there is a 30 second timeout before the connection attempt fails when trying to connect with a map via Java compute node and MbGlobal...
almost 8 years ago in App Connect 2 Future consideration

Listener snippet for the DR instance of MQ RDQM for connectivity verification without having to take down production side.

Reference Case: TS011488685 RDQM DR utilize. If could provide a listener utility would be helpful to avoid planning switches for Prod to DR to ensure connectivity when coordinating with peer connections for MQ message flow.
almost 2 years ago in MQ, MQ Advanced & MQ Appliance 2 Not under consideration

Qualys web scan flagging a "Slow HTTP Request" vulnerability on MPGW. This is considered a High Risk vulnerability.

Qualys scan found a potential Slow HTTP headers vulnerability which can be exploded for a Denial of Service (DoS) attack. The offending behavior identified by Qualys is that the server resets timeout after accepting headers from peers when process...
almost 4 years ago in DataPower Gateway 0 Future consideration

SQL-Source Support for JDBC AES256 Encryption

The DataPower SQL-Source doesn't support JDBC connection to Oracle database with AES256 encryption. We have been forced to configure the connection to use AES128 which does not meet security requirements. This limitation has been observed both wit...
almost 6 years ago in DataPower Gateway 0 Not under consideration

Ability to store "Crypto Shared Secret Key" i.e. symmetric keys in Gemalto Safenet Luna HSM client

Gemalto Luna HSM comes with an SDK and JCE provider which supports the generation and storage of symmetric keys into the HSM. However the API Gateway does not allow for the selection of the HSM as a storage option for "Crypto Shared Secret Key" ob...
almost 6 years ago in API Connect 1 Not under consideration

Log SQL Injection Attack Without rejecting Transaction

Log SQL Injection Attack Without rejecting Transaction of Web Application Firewall.
almost 6 years ago in DataPower Gateway 0 Not under consideration

Add option for Multiple KDC servers for DataPower Resiliency

We are using kerberos delegation and have a KDC server configured. We have 4 KDCs but have only configured one of them in DataPower. Microsoft doesn't support load balancing KDC's, so we are not able point to a load balanced address for the KDC se...
almost 4 years ago in DataPower Gateway 0 Future consideration

Porg / Catalog / Space Information in DPOD

Currently DPOD gets the information of Porg , Catalog , Space from the gateway based on the API invocation logs . It is also noticed that once the DPOD store clears the relevant APIC log information , the related Porg , catalog , space are also wi...
about 2 years ago in DataPower Operations Dashboard 0 Future consideration