Maintaining Logins and Passwords

This section covers the following topics: 

Changing the super admin credentials

Follow the instructions below to change the default admin password: 

1. Change the user credentials in the following files.

   • The <UserName> and <Password> values in <API-M_HOME>/repository/conf/user-mgt.xml file.

     <UserManager>
        <Realm>
           <Configuration>
               ...
               <AdminUser>
                  <UserName>admin</UserName>                  
                  <Password>admin</Password>
               </AdminUser>
           ...
        </Realm>
     </UserManager>

     Note that the password in the  user-mgt.xml  file is written to the primary user store when the server starts for the first time. Thereafter, the password will be validated from the primary user store and not from the  user-mgt.xml  file. Therefore, if you need to change the admin password stored in the user store, you cannot simply change the value in the  user-mgt.xml  file. To change the super admin password, you must use the  Change Password option from the management console.

     To change the password from Management Console (https://localhost:9443/carbon), follow the steps in Changing a Password corresponding to API Manager.

   • The <API-M_HOME>/repository/conf/jndi.properties file.

     connectionfactory.TopicConnectionFactory = amqp://admin:admin@clientid/carbon?brokerlist='tcp://localhost:5672'
     connectionfactory.QueueConnectionFactory = amqp://admin:admin@clientID/test?brokerlist='tcp://localhost:5672'

2. If you have Configured API Manager Analytics,  when changing the super admin credentials you have to change credentials in <API-M_HOME>/repository/conf/api-manager.xml file.

   <Analytics>
           <!-- Enable Analytics for API Manager -->
           <Enabled>true</Enabled>
           ....
   
           <StreamProcessorServerURL>{tcp://localhost:7612}</StreamProcessorServerURL>
           <!--StreamProcessorAuthServerURL>{ssl://localhost:7712}</StreamProcessorAuthServerURL-->
           <!-- Administrator username to login to the remote Stream Processor server. -->
           <StreamProcessorUsername>${admin.username}</StreamProcessorUsername>
           <!-- Administrator password to login to the remote Stream Processor server. -->
           <StreamProcessorPassword>${admin.password}</StreamProcessorPassword>
   
           ....
   
           <StatsProviderImpl>org.wso2.carbon.apimgt.usage.client.impl.APIUsageStatisticsRdbmsClientImpl</StatsProviderImpl>
   
           ...
   
           <StreamProcessorRestApiURL>https://localhost:9444</StreamProcessorRestApiURL>
           <StreamProcessorRestApiUsername>${admin.username}</StreamProcessorRestApiUsername>
           <StreamProcessorRestApiPassword>${admin.password}</StreamProcessorRestApiPassword>
   
           .....
   
       </Analytics>

Recovering a password

For information, see How can I recover the admin password used to log in to the management console?

Login in via multiple user attributes in API Store

For information, see Authentication using multiple Attributes in the WSO2 IS documentation.

Setting up an e-mail login 

For information, see Email Authentication in the WSO2 IS documentation.

Setting up a social media login

You can auto-provision users based on a social network login by integrating the API Manager with WSO2 Identity Server. Refer Log in to the API Store using Social Media for more information.