Configure the app resources in BlackBerry Online Account Skip Navigation
  1. BlackBerry Docs
  2. 12.16
  3. BlackBerry Web Services OAuth Implementation Guide
  4. Using the OAuth client credentials grant type with an enterprise app
  5. Configure the app resources in BlackBerry Online Account

Configure the app resources in 
BlackBerry Online Account

This task must be completed by someone (you or the 
UEM
 administrator) that has access to the 
BlackBerry Online Account
 that is associated with the 
UEM
 domain. You or the 
UEM
 administrator use the 
BlackBerry Online Account
 to:
  • Add the details of the app (name, description, entitlement ID, version, capabilities)
  • Create a client template that defines the default settings for all clients that belong to the app
  • Use the client template to define the app client and generate a unique client ID (and if applicable, client secret) that the app can use to connect to 
    UEM
     and invoke the REST APIs
For all tasks that involve the use of 
BlackBerry Online Account
, see the BlackBerry Online Account User Guide for complete instructions.
If an administrator will complete this task, review the steps below and give the administrator the necessary information that they will need to specify (name, entitlement ID, entitlement version, preferred token endpoint authentication method, and so on).
  1. Log in to BlackBerry Online Account and navigate to your organization.
  2. On the menu bar, click 
    Applications
    . On the 
    Organization
     tab, click 
    Add Application
    .
  3. Specify the app details. In the 
    Capabilities
     section, select the 
    BlackBerry Platform APIs
     check box only (unless you are making changes to an existing app that uses other capabilities). For example:
    • Name
      : BB Sample Client Credentials App
    • Entitlement ID
      : com.domain.bb.sample.cc
    • Entitlement version
      : 1.0.0.0
    • Capabilities
      : BlackBerry Platform APIs
  4. Click 
    Add Application
    .
  5. On the 
    BlackBerry Platform APIs
     tab for the app, on the 
    Template
     tab, click 
    Add Template
    .
  6. Specify the template details. Select the following options:
    • Redirect URLs
      : https://localhost:9443/cb
    • Type
      : web
    • Grant Type
      : client_credentials
    • Response Types
      : none
    • Token Endpoint Auth Method
      • To generate a client secret code, click client_secret_basic.
      • To require the generation of a public/private key pair (you will register the public key when you define the client in step 8 and on), click private_key_jwt.
    • API Scopes
      : Mobile Device Management
    The SampleWithClientCredsAndClientSecret.java sample demonstrates the use of the client_secret_basic token endpoint authentication method. The SampleWithClientCredsAndPrivateKey.java sample demonstrates the private_key_jwt method and passes a private key when executed.
  7. Click 
    Register
    .
  8. On the 
    BlackBerry Platform APIs
     tab for the app, on the 
    Client
     tab, click 
    Add Client
    .
  9. Specify the required information.
    Example for SampleWithClientCredsAndClientSecret.java
    • Client Name
      : BlackBerry Sample Client Credentials Client
    • Tenants
      : Select the 
      UEM
       tenants that the client app will contact to invoke the REST APIs.
    Example for SampleWithClientCredsAndPrivateKey.java
    • Client Name
      : BlackBerry Sample Client Credentials Client
    • Id Token Signed Response Alg
      : RS256
    • Token Endpoint Auth Signing Alg
      : RS256
    • Public Key
      : Add the public key in PKCS#8 format
    • Tenants
      : Select the 
      UEM
       tenants that the client app will contact to invoke the REST APIs.
  10. Click 
    Register
    .
The client ID (and if applicable, the client secret) is generated. The client app will use the client ID and either a client secret or private key (depending on the configuration) to connect to the 
BlackBerry Web Services
 REST APIs.