Skip to Main Content
Integration


This is an IBM Automation portal for Integration products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


Status Not under consideration
Workspace App Connect
Created by Guest
Created on Oct 25, 2023

App Connect Enterprise - provide CLI option to set/modify "userRetrievableCredentialTypes"

userRetrievableCredentialTypes is a property of App Connect Enterprise to define which "credentials types" could be read by the application. 

As of today the property needs to be modify / set directly in the server.conf.yaml.  
There is no way to change the property via a command line call like "mqsichangeproperty" - or any equivalent. 

This is a pity of a couple of customer - as they need to touch/modify the server.conf.yaml file directly. 

Why is this a pity? 
--> typically the customer use standard CLI commands to modify the integration server parameter. 
One example is "mqsichangeproperties".  The advantage: the  CLI commands could be easily added to a "setup/deployment script". 
For userRetrievableCredentialTypes  they now have to touch in addition the server.conf.yaml file. 
This has two disadvantages: 
- the customer needs to extend their setup / deployment logic to modify the file - which is more difficult than running a CLI command / script. 
- the customer needs to take care about another "config approach / handling" of its integration server (another small - but extra layer for configuration)

Bottom line: it would be great to have a CLI command to  change the userRetrievableCredentialTypes property. 

 

 

Idea priority Medium
  • Admin
    Ben Thompson
    Reply
    |
    Jan 15, 2024

    Idea review. Thank you very much for taking the time to raise this suggestion, but unfortunately on this occasion we will not be taking the idea forward. ACE has a very large number of possible configuration properties which particular users may want to specify for their own purposes and in general our architectural direction these days is to embrace declarative styling (defining properties up front in the server.conf.yaml file before starting a server) so that ACE can be a first-class citizen in cloud-native/Kubernetes environments. Controlling ACE behaviour in this way avoids the need for such a large number of dynamic options (ie those options not requiring server restart to take effect) and also avoids the need for a user to "log on" to an environment and make a change - using operator code and pre-declared yaml files with property settings is a much more efficient way of driving consistency through a set of installations. There are some cases where dynamic / command-based control is still required but this is a diminishing set of usecases, and choosing whether a JCN is allowed to retrieve a particular type of credential is more fringe than mainstream. Sorry we won't be taking this one any further. Best Regards, Ben