About API Mappers

The API Mappers define the relation between Applications, Asset Types, and Identity Sources in the Authorization Platform to the APIs used to access or use the business applications of the Organization. This allows users to gain better control over values used for specific API access flows, reducing unnecessary data fetching and improving performance. To view the API Mappers associated to an Application, click on the Application in the Authorization Workspace and select the API Mappers tab.

When working with API Mappers, the following basic workflow can be followed:

• Create an Application

  • Example: Create an External Bank Portal application in the Authorization Platform.

• Create the Asset Types

  • Define the organization's Assets, such as Account, Loan Applications, etc.

• Create an Identity Source

  • Specify where the Identity information for Authorization decisions is retrieved.

• Add an API Mapper

  • Configure the services your organization uses to access the defined assets.

• Associate the Asset Type to the API Mapper

  • Link the Asset Type within the Application.

• Define the Asset Attributes and Actions Mapping Logic

  • Define the mapping logic for the Asset Attributes and Actions, which can only be done after associating the Asset Type.

• Prioritize the API Mappers

  • Arrange the services from the most specific to the most general pattern.

API Mappers within the Authorization Platform are created for and must be unique in an Application (click on an Application and select the API Mappers tab).

In addition to a Name and Description (optional), each API Mapper is assigned these mandatory fields:

• A Match Type: Exact, Wildcards, or Regex Match

• A Match Pattern: A unique value which maps the API URL, allowing the Authorization Platform to match it during Authorization Decision requests.

• Asset Types: Determines which Asset Type (or Asset Types) are associated with this Mapper (for example: Loan, Account means that the API Mapper is associated with Asset Types Loan and Account).

For more information, see Managing API Mappers.