Enable REST API authentication by setting the require-api-authentication property of the Metrics HTTP Servlet Extension Configuration object as follows:
$ bin/dsconfig set-http-servlet-extension-prop \
  --extension-name "PingDataMetrics Server REST API Servlet" \
  --set require-api-authentication:true
Perform the following steps to add a REST API user:
  1. Create a file name api-user1.ldif containing one or more user entries with no privileges.
    dn: cn=app-user1,cn=api-users
      changeType: add
      objectClass: inetOrgPerson
      objectClass: person
      objectClass: top
      cn: app-user1
      uid: app-user1
      sn: User1
      userpassword: api1
      ds-pwp-password-policy-dn: cn=Default Password Policy,cn=Password
      Policies,cn=config
    The password is in clear text. It will be encrypted next.
  2. As a privileged user that can add API users, load the entry using the following ldapmodify command.
    $ bin/ldapmodify --filename api-user1.ldif
  3. Authenticate using one of the following options:
    • Authenticate using the full DN of the user added (cn=app-user1, cn=api-users).
    • Authenticate using the UID (app-user1).
    The user name to DN map is governed by the identity-mapper setting of the Metrics REST HTTP Servlet Extension configuration object.
  4. Enable Velocity Template authentication with the following command.
    $ bin/dsconfig set-http-servlet-extension-prop \
      --extension-name Velocity \
      --set require-authentication:true