Configure the app resources in BlackBerry Online Account

This task must be completed by someone (you or the UEM administrator) that has access to the BlackBerry Online Account that is associated with the UEM domain. You or the UEM administrator use the BlackBerry Online Account to:
  • Add the details of the app (name, description, entitlement ID, version, capabilities)
  • Create a client template that defines the default settings for all clients that belong to the app
  • Use the client template to define the app client and generate a unique client ID (and if applicable, client secret) that the app can use to connect to UEM and invoke the REST APIs
If an administrator will complete this task, review the steps below and give the administrator the necessary information that they will need to specify (name, entitlement ID, entitlement version, preferred token endpoint authentication method, and so on).
  1. Log in to BlackBerry Online Account and navigate to your organization.
  2. On the menu bar, click Applications. On the Organization tab, click Add Application.
  3. Specify the app details. In the Capabilities section, select the BlackBerry Platform APIs check box only (unless you are making changes to an existing app that uses other capabilities). For example:
    • Name: BB Sample Client Credentials App
    • Entitlement ID: com.domain.bb.sample.cc
    • Entitlement version: 1.0.0.0
    • Capabilities: BlackBerry Platform APIs
  4. Click Add Application.
  5. On the BlackBerry Platform APIs tab for the app, on the Template tab, click Add Template.
  6. Specify the template details. Select the following options:
    • Redirect URLs: https://localhost:9443/cb
    • Type: web
    • Grant Type: client_credentials
    • Response Types: none
    • Token Endpoint Auth Method
      • To generate a client secret code, click client_secret_basic.
      • To require the generation of a public/private key pair (you will register the public key when you define the client in step 8 and on), click private_key_jwt.
    • API Scopes: Mobile Device Management

    The SampleWithClientCredsAndClientSecret.java sample demonstrates the use of the client_secret_basic token endpoint authentication method. The SampleWithClientCredsAndPrivateKey.java sample demonstrates the private_key_jwt method and passes a private key when executed.

  7. Click Register.
  8. On the BlackBerry Platform APIs tab for the app, on the Client tab, click Add Client.
  9. Specify the required information.
    Example for SampleWithClientCredsAndClientSecret.java
    • Client Name: BlackBerry Sample Client Credentials Client
    • Tenants: Select the UEM tenants that the client app will contact to invoke the REST APIs.
    Example for SampleWithClientCredsAndPrivateKey.java
    • Client Name: BlackBerry Sample Client Credentials Client
    • Id Token Signed Response Alg: RS256
    • Token Endpoint Auth Signing Alg: RS256
    • Public Key: Add the public key in PKCS#8 format
    • Tenants: Select the UEM tenants that the client app will contact to invoke the REST APIs.
  10. Click Register.
The client ID (and if applicable, the client secret) is generated. The client app will use the client ID and either a client secret or private key (depending on the configuration) to connect to the BlackBerry Web Services REST APIs.
Develop the client app.