Configuring User Stores

The user management feature in WSO2 Open Banking products allows you to maintain multiple user stores for your system that are used to store the users and their roles. You can set up any of the following types of user stores:

• JDBC user stores
• Active Directory user stores
• Read-Only LDAP user stores
• Read-Write LDAP user stores

In an open banking environment, banking staff, third parties, and customers are the main types of users that need to be classified into the above user stores.

The Primary User Store in WSO2 Open Banking is configured in both Key Manager and API Manager components:

• <WSO2_OB_KM_HOME>/repository/conf/user-mgt.xml
• <WSO2_OB_APIM_HOME>/repository/conf/user-mgt.xml

With the user management feature, any number of Secondary User Stores can be easily set up for your system using the management console. This will automatically create an XML file with the configurations corresponding to the secondary user store. Alternatively, you can manually create the configuration file and store it in this directory without using the management console. Secondary User Stores are specific to the created tenant, and they are not shared between multiple tenants.

The following topics include instructions on setting up user stores:

• Configuring the Primary User Store
• Configuring Secondary User Stores
• Working with Properties of User Stores
• Writing a Custom User Store Manager