Instance Registration - PaloAltoNetworks/app-f-oauth2-shared GitHub Wiki

Instance Registration

Each time a customer activates the OAUTH2 Shared Component into his Cloud Apps Portal tenant, a new instance_id is generated. A instance_id is a unique identifier in the Application Framework API namespace that maps a Logging Service (data lake) instance with an application willing to access it.

Activating an application does not mean that the application gets access grant to that customer's data lake. An authorization process (OAUTH2 Code Grant) must be completed before the application is given access.

The first step, then, is to register the instance_id that is generated when a user activates the application in the portal into the corresponding OAUTH2 Shared Component tenant. This is a straight forward (even transparent) process that just requires the end user to click on the application's tile from the Cloud Portal.

Overview Image

If the user was already logged in into the OAUTH2Shared application before clicking on the Cloud Portal tile, then the instance_id will be automatically registered and the corresponding TAB created in the application.

Realize that the TAB name will be extracted from the Instance Alias field presented to the user during the application activation in the portal (lsalias field in the manifest file)

O

If the user was not logged in then he will be prompted to either log in or create a new account. In any case, the instance registration will be triggered at the end of the process.