Sharing Applications and Subscriptions

The API Manager provides the facility to users of a specific logical group, such as an organization, to view each others' applications and subscriptions.  

By default, the API Manager considers the organization name that you give at the time you sign up to the API Store, as the group ID. It extracts the claim http://wso2.org/claims/organization  of a user and uses the value specified in it as the group ID. This way, all users who specify the same organization name belong to the same group, and therefore, can view each others' subscriptions and applications, provided that they have enabled application sharing. The API Manager also provides the flexibility to change this default authentication implementation.

Enabling application sharing

You can enable application sharing with users in a single group or between users in multiple groups by following the steps below.

1. Uncomment the <GroupingExtractor> element in the <API-M_HOME>/repository/conf/api-manager.xml file.

   <GroupingExtractor>org.wso2.carbon.apimgt.impl.DefaultGroupIDExtractorImpl</GroupingExtractor>

   This default extractor does not work with SAML SSO. To enable SAML SSO, you need to define the GroupingExtractor element as follows:

   <GroupingExtractor>org.wso2.carbon.apimgt.impl.SAMLGroupIDExtractorImpl</GroupingExtractor>

   • The implementation for enabling SAML SSO using the SAMLGroupIDExtractorImpl grouping extractor is available only as a WUM update.

   • You need to get the latest product updates for your product to use this feature in the current version of WSO2 API-M. This feature is available as a product update from April 4, 2018 onwards.

     Note that you can deploy updates in a production environment only if you have a valid subscription with WSO2. Read more about WSO2 Updates.

2. Start WSO2 API Manager and click Sign-up.
   
3. Sign up to the API store as two different users (User1 and User2) with the same organization name.
   Example:
   
4. Sign in as User1, create a new application (e.g., TestApp1) and subscribe to an API using the new application. 
   
5. Sign out of the API Store and sign back in as User2.
   Go to the Applications page and note that the previous user's subscription is listed under Subscriptions for the application that the previous user created (e.g., TestApp1).