Forum Discussion

shridharmishra's avatar
shridharmishra
Adept
11 years ago

Integration with CIM (eGain)

Hi All,

 

We are planning to integrate the lithium community with eGain. I have seen that for a given community the search api are not accessible directly. I am getting following error :

 

User -1 does not have the following permission(s) at ***** [allow_restapi_call_read ]

 

What i understood from the documentation that  configuration should be done in order to call Lithium's REST APIs from an endpoint or from a domain outside your community.

So in case we are not going to allow all the request from a domain, instead of this if we are going to allow few users from a certain domain to access the search API's. Then in that case how the integration need to be done, how the authentication will be done.Do we need to send the user credential with each request, if yes then what will be the format.

It will be great if you can throw some light regarding the integration and authentication of user.

 

Thanks in advance for your help!!!

4 Replies

Sort By
  • HaidongG's avatar
    HaidongG
    Lithium Alumni (Retired)
    11 years ago

    Hi shridharmishra , 

     

    Nope it simply means that you need to have a valid user session to access the REST API.

     

    you will find more details here.

  • HaidongG's avatar
    HaidongG
    Lithium Alumni (Retired)
    11 years ago

    thanks nathan fruitful elaboration, I didn't get my answer clear. 

     

    just to add on a bit, even you have SSO turn on, you still can create a special non-SSO account with Lithium Support, and use that non-SSO account for REST API calls only, as long as the REST result is not user specified, i.e. different user sees different result.

  • shridharmishra's avatar
    shridharmishra
    Adept
    11 years ago

    First of all thanks to  nathan and @HaidongG 

     

    According to above post it is very clear that before calling the REST API we will need to establish a session if API's dont have the public read access. 

    According to the documentation i have found also that access can also be given to the calls coming from specific domain also.

    As well as we can give the read write access to a given user also. 

     

    Do we have any search API's also which gives the result of the articles (best answers) and also it includes the employee generated content? And also like api by which we can also exclude the employee generated content?