Discover Refinitiv
MyRefinitiv Refinitiv Perspectives Careers
Created with Sketch.
All APIs Questions & Answers  Register |  Login
Ask a question
  • Questions
  • Tags
  • Badges
  • Unanswered
Search:
  • Home /
  • App Studio /
avatar image
Question by qraft · Jan 25, 2017 at 01:46 AM · qraft

Question about Auth Service to App Studio Team

Hello, I'm app developer to want to use AuthService.
I have some questions about AuthService.

(Q1) I want to register our company application in the library. According to 3page of document(AppStudioAuthServiceGuide.docx), I have to send our app information to the App studio team. Where i should send app studio team. If by email, what is the email address of App studio team?

(Q2) In 3page of AppStudioAuthServiceGuide.docx, I have question about config.json.
About Certificate(PEM) and ServerCertificate part, in this part, contents that i should insert are contents which generated by X.509(makecert or openssl), right?
Or just sended by app studio team, when they will send me a config.json file?


(Q3) Examples of AuthService don't include PHP code(only ASP/node.js/JAVA at this URL =https://developers.thomsonreuters.com/app-studio/app-studio-web-sdk/downloads).
Is there a example code of PHP? If so, how can I get the code?

I will appreciate it if answer my questions.
Partial answer is also okay.
Also, if you cannot understand my question, please request me additional explanation.


Thanks.

People who like this

0 Show 0
Comment
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

4 Replies

  • Sort: 
avatar image
Best Answer
Answer by elizabeth.piazza · Jan 25, 2017 at 08:56 AM

Hi @qraft

(Q1) In general, you can reach the App Studio team at AppStudioProduct@thomsonreuters.com

However, if you are in the App Studio program, it is probably faster and more efficient to work directly with the TR point of contact that was assigned to you in the App Studio Onboarding process (who gave you the demo to the App Studio tools)

(Q2) You can generate and download the config.json file in the App Studio Admin tool in Eikon, once your application is registered in the library

(Q3) It seems you are reading about Authservice V1. I STRONGLY recommend using Authservice v2 instead: https://developers.thomsonreuters.com/app-studio/app-studio-web-sdk/docs?content=10791&type=documentation_item

There isn't PHP examples, but Authservice v2 is much more in line with the SAML2 standards. I don't have any in particular but you can find many examples and third party tools online for this combination, or maybe someone else in the community has answers.

Comment
qraft

People who like this

1 Show 1 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
qraft · Feb 08, 2017 at 12:43 AM 0
Share

Thanks for your kind reply! It's really helpful.

avatar image
REFINITIV
Answer by Alex Putkov. · Jan 25, 2017 at 11:04 AM

(Q3) With Authservice v2 you can use ready available 3rd party SAML federated authentication solutions. Authservice v2 was tested with Shibboleth for IIS and mod_auth_mellon module for Apache. Both are free and will turn integration with App Studio authentication service into an engineering task of installing and configuring 3rd party software rather than a development task. From past experience with numerous App Studio partners who successfully used Shibboleth or Apache mod_auth_mellon, unless you already have expertise in these systems, it's not necessarily any easier to use them then to create your own SAML Service Provider implementation for integration with App Studio Authorization Service.

Comment
qraft

People who like this

1 Show 1 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
qraft · Feb 08, 2017 at 12:44 AM 0
Share

I will consider it when i develop! Thanks!

avatar image
Answer by emir.subasic · Sep 12, 2018 at 12:18 PM

Hi,

I am also in the process of integrating my app with the AuthServiceV2.

You recommend using 3rd party tools such as Shibboleth and according to the AuthSevriceV2 guide it was tested against v2.6.0. Shibboleth offers many configuration options and therefore many ways to set it up.

I am wondering (and this would be extremely helpful to anyone implementing an app) if you could provide a guide on setting this up since you have already successfully done it?

The documentation is very light in this area and such a guide would be of massive help.

One more point, if the use of 3rd party tools is not an option for some reason, would you be able to expand the documentation in this area?

Many thanks

Comment

People who like this

0 Show 2 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
REFINITIV
Alex Putkov. ♦♦ · Sep 12, 2018 at 12:36 PM 0
Share

@emir.subasic
We do not recommend Shibboleth or any other federated authentication solution. We simply state that we tested App Studio Authorization Service v2 with Shibboleth and with Apache mod_auth_mellon.
I'm afraid we cannot provide any guidance on setting up Shibboleth. Even though we've done it successfully, as did numerous App Studio partners, this is not our area of expertise.

avatar image
REFINITIV
Alex Putkov. ♦♦ · Sep 12, 2018 at 12:39 PM 0
Share

From past experience with other App Studio partners setting up Shibboleth can be tricky and it's not necessarily any easier than implementing your own custom code. We can provide code samples in Java and Node.js showing how you can implement federated authentication with App Studio Authorization Service in your code. If you'd like to obtain these samples, please reach out to the Thomson Reuters Developer Advocate assigned to you.

avatar image
Answer by emir.subasic · Sep 13, 2018 at 04:53 AM

Hi Alex,

Thanks for your response. The reason why I mention Shibboleth is because of your last post:

"With Authservice v2 we recommend ready available 3rd party SAML federated authentication solutions such as Shibboleth for IIS and Apache Mellon module for Apache. "

That reads as a recommendation to me and from that I inferred that as you have already verified those 2 3rd party tools it would be a natural selection to go with one of these.

I have reached out to my TR dev advocate who has stated that you do not have any code examples, hence the reason why I am reaching out to the wider community and also providing some feedback on the lack of documentation in this area. I gather from your past experience that people are struggling with this and in the interest of everyone's time it would be good to document some examples for future app developers.

You mention that you have examples in Java and Node.js. Are you able to share these please?

Many Thanks

Comment

People who like this

0 Show 2 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
REFINITIV
Alex Putkov. ♦♦ · Sep 13, 2018 at 10:21 AM 0
Share

@emir.subasic
You're right, my statement in the answer I posted on this thread back in early 2017 does read like a recommendation, which is misleading. Thanks for pointing it out. I have rephrased my post.
I also shared the code samples with the Developer Advocate assigned to you. You can request these samples from him.

avatar image
emir.subasic Alex Putkov. ♦♦ · Sep 13, 2018 at 10:39 AM 0
Share

Thats great. Many thanks

Watch this question

Add to watch list
Add to your watch list to receive emailed updates for this question. Too many emails? Change your settings >
9 People are following this question.

Related Questions

How to contact to App Studio Team 1 Answer

  • Feedback
  • Copyright
  • Cookie Policy
  • Privacy Statement
  • Terms of Use
  • Careers
  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Spaces
  • Alpha
  • App Studio
  • Block Chain
  • Bot Platform
  • Calais
  • Connected Risk APIs
  • DSS
  • Data Fusion
  • Data Model Discovery
  • Datastream
  • Eikon COM
  • Eikon Data APIs
  • Elektron
    • EMA
    • ETA
    • WebSocket API
  • Elektron Data Platform
  • Legal One
  • Messenger Bot
  • Messenger Side by Side
  • ONESOURCE
    • Indirect Tax
  • Open PermID
    • Entity Search
  • Org ID
  • PAM
    • PAM - Logging
  • ProView
  • ProView Internal
  • Product Insight
  • Project Tracking
  • Rose's Space
  • Screening
    • Qual-ID API
    • Screening Deployed
    • Screening Online
    • World-Check One
    • World-Check One Zero Footprint
  • Side by Side Integration API
  • TR Knowledge Graph
  • TREP APIs
    • CAT
    • DACS Station
    • Open DACS
    • RFA
    • UPA
  • TREP Infrastructure
  • TRIT
  • TRKD
  • TRTH
  • Thomson One Smart
  • Transactions
    • REDI API
  • Velocity Analytics
  • Wealth Management Web Services
  • Explore
  • Tags
  • Questions
  • Badges