Magento 2 Analytics User Guide

There are 4 types of users in Magento 2 (see \Magento\Authorization\Model\UserContextInterface), any of them can be used while making requests via web APIs :

• Anonymous users (guests). User is considered to be anonymous if no tokens or cookies were used to make requests
• Customers. Customer token or cookie must be passed along with request
• Admins. Admin token or cookie must be present
• Integrations. Integration access token should be passed in OAuth 2.0 style OR request should be properly signed using consumer key, consumer secret, access token, access token secret in OAuth 1.0a style

Integration can be created at System > Integration > Add New Integration, it can be given the same permissions as any Admin user (ACL tree is the same). Web API requests can be made on behalf of both, admin and integration. What differs integration from the admin user is that 3rd party can retrieve web API credentials using OAuth handshake.

OAuth handshake allows to integrate with multi-user 3rd party system automatically (when supported by 3rd party):

• During integration creation fill out optional fields Callback URL and Identity Link URL (both should be provided by 3rd party system)
• When you try to activate integration, OAuth handshake will be triggered
• Some data will be sent by Magento to Callback URL using server-to-server POST request. Identity Link Url (login page on 3rd party system) will be opened in popup window and some GET parameters will be sent
• After successfully authenticated user credentials, 3rd party will request Request Token from Magento and then exchange it for Access token. It will also associate current Magento instance with user account on its own records. I.e. multiple Magento merchants can have accounts in the same 3rd party CRM, and every merchant's account will be tied to his Magento instance
• Issued access token can be used to make requests to Magento web API. This token will be associated with Magento Integration record and will have access to resources selected in API tab of Integration edit page

Quick note about calling multiple services at once, this feature is better known as aggregation APIs and does not have anything in common with Integration user type.

We implement the oAuth request token from openAM and created the new user in Magento2. As we manage user groups and role in our system and using oAuth token to validate it. Hopefully this will help you little

// get admin Token to create the customer Account in realm Data stores
        $ch = curl_init('http://openam/json/authenticate');
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array(
            'X-OpenAM-Username: uradmin',
            'X-OpenAM-Password: urpassword',
            'Accept-API-Version: resource=2.0, protocol=1.0'
          )
        );

        $result = curl_exec($ch);

        curl_close($ch);

        if (array_key_exists('tokenId', json_decode($result, true))) {
            $adminToke = json_decode($result, true)["tokenId"];

            //create user in OpenAM Customer Realm
            $data = array("username" => $email, "userpassword" => $password,"mail"=>$email);
            $data_string = json_encode($data);

            $ch = curl_init('http://openam/json/admingroup/users/?_action=create');
            curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
            curl_setopt($ch, CURLOPT_POSTFIELDS, $data_string);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($ch, CURLOPT_HTTPHEADER, array(
                'Content-Type: application/json',
                'iplanetDirectoryPro:'.$adminToke.''
              )
            );


            curl_close($ch);

            // create Magento Customer in Magento DB


            $customer=$this->_objectManager->create('Magento\Customer\Model\Customer');
            $customer->setWebsiteId($this->_objectManager->create('Supplier\Delegate\Helper\Data')->getCurrentWebsiteId());
            $customer->setStoreId($this->_objectManager->create('Manufacture\Dealers\Helper\Data')->getCurrentStoreId());
            $customer->setGroupId(5);
            $customer->setFirstname($firstName);
            $customer->setLastname($lastName);
            $customer->setEmail($email);
            $customer->setPassword($password);


            try{
                $customer->save();
            }
            catch   (\Exception $exception)
            {
                $this->messageManager->addError($exception->getMessage());
                return $this->resultRedirectFactory->create()->setPath('*/*/register');
            }
            //save SupplierDelgate Model
            $model = $this->_objectManager->create('Manufacture\Dealers\Model\Suppliers');
            $model->setDelegateId($customer->getId());
            $model->setParentSupplierId($supplierParentId);
            $model->setRole($role);
            $model->save();

            $address =$this->_objectManager->create('Magento\Customer\Model\Address');
            $address->setCustomerId($customer->getId())
              ->setFirstname($customer->getFirstname())
              ->setMiddleName($customer->getMiddlename())
              ->setLastname($customer->getLastname())
              ->setCountryId('SA')
              //->setRegionId('1') //state/province, only needed if the country is USA
              ->setPostcode($postCode)
              ->setCity($city)
              ->setTelephone($telephone)
              ->setFax($fax)
              ->setCompany($company)
              ->setStreet($street)
              ->setIsDefaultBilling('1')
              ->setIsDefaultShipping('1')
              ->setSaveInAddressBook('1');

            try{
                $address->save();
                $this->_objectManager->create('Manufacture\Dealers\Helper\Data')->setCustomerStatus("Active",$customer->getId());

                $this->messageManager->addSuccess(__('registration have been completed Successfully '));
                $this->_redirect('customer/account/login/');

            }
            catch (Exception $e) {
                Zend_Debug::dump($e->getMessage());
            }

--Yogi--