Prerequisites

Complete the following prerequisites before deploying PingIntelligence policy on Akana API gateway.

Install PingIntelligence software:PingIntelligence software should be installed and configured. Refer to Automated deployment or Manual deployment.

Verify that ASE is in sideband mode:Check that ASE is in sideband mode by running the following ASE command:

/opt/pingidentity/ase/bin/cli.sh status
API Security Enforcer
status                  : started
mode                    : sideband
http/ws                 : port 80
https/wss               : port 443
firewall                : enabled
abs                     : enabled, ssl: enabled
abs attack              : disabled
audit                   : enabled
sideband authentication : disabled
ase detected attack     : disabled
attack list memory      : configured 128.00 MB, used 25.60 MB, free 102.40 MB

If ASE is not in sideband mode, then stop ASE and change the mode by editing the/opt/pingidentity/ase/config/ase.conf file. Set mode as sideband and start ASE.

Enable sideband authentication: For a secure communication between Akana gateway and ASE, enable sideband authentication by entering the following ASE command:

# ./bin/cli.sh enable_sideband_authentication -u admin –p

Ensure SSL is configured in ASE for client side connection using CA-signed certificate.Please refer to Configure SSL for external APIs for more details.

Generate sideband authentication token: To generate the token in ASE, enter the following command in the ASE command line:

# ./bin/cli.sh -u admin -p admin create_sideband_token