Skip to main content
The Infisical IBM API Connect dynamic secret allows you to generate IBM API Connect application credentials (Client ID and Client Secret) on demand based on a configured application.

​
Prerequisites

  1. You need an active IBM API Connect subscription with a running instance.
  2. You need at least one organization, catalog, and application already configured in your IBM API Connect instance.

​
Create an API Key in IBM API Connect

1

Navigate to the Subscriptions page in the IBM SaaS Console and click 'View instances' under your API Connect subscription.

View Instances
2

Click 'Open' to open your API Connect instance.

Open Instance
3

Once inside the API Connect dashboard, click on your profile icon in the top-right corner and select 'My API Keys'.

My API Keys
4

Click the 'Add' button to create a new API key.

Add API Key
5

Fill in the API key details and click 'Create'.

Fill and Create API Key
  1. Title — Give the API key a descriptive name (e.g. infisical-api-key).
  2. Description — Add a description for the key (e.g. Key used by Infisical for creating Dynamic Secrets).
  3. API key timeout — Set the timeout to 0 to disable expiration, or configure it based on your needs.
  4. Enable multiple use — Check this box to allow the API key to be used multiple times.
Click Create to generate the API key. Copy the generated key and save it securely — you will need it when configuring the dynamic secret in Infisical.
6

Collect the Instance URL, Client ID, and Client Secret from the 'My API Keys' page.

Get Server and Client Info
  1. Instance URL — Copy the server URL shown in the CLI command (e.g. https://platform-api.trial.apiconnect.automation.ibm.com).
  2. Client ID — Found in the client_id field of the “Authenticating for the platform REST API” curl snippet.
  3. Client Secret — Found in the client_secret field of the same curl snippet.
Save these values along with the API key — you will need all four when configuring the dynamic secret in Infisical.

​
Set up Dynamic Secrets with IBM API Connect

1

Open Secret Overview Dashboard

Open the Secret Overview dashboard and select the environment in which you would like to add a dynamic secret.
2

Click on the 'Add Dynamic Secret' button

Add Dynamic Secret Button
3

Select IBM API Connect

Dynamic Secret Modal
4

Provide the inputs for dynamic secret parameters

​
Secret Name
string
required
Name by which you want the secret to be referenced
​
Default TTL
string
required
Default time-to-live for a generated secret (it is possible to modify this value after a secret is generated)
​
Max TTL
string
required
Maximum time-to-live for a generated secret
​
Instance URL
string
required
The URL of your IBM API Connect platform API (e.g. https://platform-api.trial.apiconnect.automation.ibm.com).
​
API Key
string
required
The IBM API Connect API key you created in the previous steps. This will be used to authenticate and provision dynamic secret leases.
​
Client ID
string
required
The client ID used for authenticating with the IBM API Connect platform REST API.
​
Client Secret
string
required
The client secret used for authenticating with the IBM API Connect platform REST API.
Once the credentials are filled in, Infisical will automatically fetch your available organizations, catalogs, and applications.
​
Organization
string
required
The IBM API Connect organization under which the application credentials will be created.
​
Catalog
string
required
The catalog that owns the application for which credentials will be created.
​
Application
string
required
The application for which dynamic credentials will be generated. Each lease creates a new credential pair on this application.
5

Click `Submit`

After submitting the form, you will see a dynamic secret created in the dashboard.Dynamic Secret Setup
6

Generate dynamic secrets

Once you’ve successfully configured the dynamic secret, you’re ready to generate on-demand credentials. To do this, simply click on the ‘Generate’ button which appears when hovering over the dynamic secret item. Alternatively, you can initiate the creation of a new lease by selecting ‘New Lease’ from the dynamic secret lease list section.Dynamic SecretDynamic SecretWhen generating these secrets, it’s important to specify a Time-to-Live (TTL) duration. This will dictate how long the credentials are valid for.Provision Lease
Ensure that the TTL for the lease falls within the maximum TTL defined when configuring the dynamic secret.
Once you click the Submit button, a new secret lease will be generated and you will be presented with the generated Client ID and Client Secret.
Copy the credentials immediately — you will not be able to see them again after closing the modal.

​
Audit or Revoke Leases

Once you have created one or more leases, you will be able to access them by clicking on the respective dynamic secret item on the dashboard. This will allow you to see the expiration time of the lease or revoke a lease before its time to live expires. When a lease is revoked (either manually or by TTL expiration), Infisical will delete the corresponding application credential from IBM API Connect. Provision Lease

​
Renew Leases

To extend the life of the generated dynamic secret leases past its initial time to live, simply click on the Renew button as illustrated below. Provision Lease
Lease renewals cannot exceed the maximum TTL set when configuring the dynamic secret.