DocsICP FilingConsole
官方文档
首页

SDK Overview

更新时间：
复制 MD 格式
产品详情
我的收藏

IDaaS EIAM provides SDKs for machine-to-machine (M2M) applications across four scenarios: Generic OAuth 2.0, Akless (no AccessKey), credential management, and Agent ID. Select the SDK that matches your scenario, then follow the setup guide.

Available SDKs

The following table lists each SDK, its capabilities, and supported languages.

SDK

Capabilities

Language

Github

IDaaS Core SDK

  • Obtains access tokens for M2M client applications using multiple authentication methods.

  • Supports token exchange for access tokens with different audience or scope identifiers.

Java

Python

Java

Python

IDaaS Akless Alibabacloud Adapter

  • Uses the IDaaS Core SDK to performs M2M client application authentication and obtains access tokens.

  • Retrieves temporary STS tokens for IDaaS-managed cloud roles, eliminating static AccessKeys.

Java

Python

Java

Python

IDaaS Core Alibabacloud Authentication Plugin

  • Authenticates IDaaS OpenAPI calls using Alibaba Cloud credentials (AccessKey/SecretKey or STS token).

  • Currently supports the Alibaba Cloud extension plugin only.

Java

Python

Java

Python

IDaaS Pam Client

  • Uses the IDaaS Core SDK to perform M2M client application authentication and obtain access tokens.

  • Retrieves credentials managed by IDaaS.

  • Obtains access tokens through credential providers managed by IDaaS.

Java

Python

Java

Python

Scenarios and Required SDKs

Each scenario requires one or more SDKs. Find your scenario and install the listed SDKs.

Scenario

Description

Required SDKs

Generic OAuth

M2M client applications authenticate using standard or federated methods to obtain access tokens.

Supported authentication methods:

  • Standard (OpenID Connect (OIDC)/OAuth 2.0): CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, CLIENT_SECRET_JWT, PRIVATE_KEY_JWT

  • IDaaS federated extensions: PKCS#7, OIDC, PCA

Supported environments: local development, Alibaba Cloud ECS, Kubernetes, Function Compute, and others.

In environments where federated credentials (PKCS#7, OIDC) are unavailable — such as serverless functions or restricted runtimes — IDaaS supports OpenAPI-based authentication. Add the IDaaS Core Alibabacloud Authentication Plugin to authenticate with Alibaba Cloud AccessKey/SecretKey or STS tokens.

  • IDaaS Core SDK

  • IDaaS Core Alibabacloud Authentication Plugin (optional, for OpenAPI authentication)

Akless

Associate RAM roles with IDaaS. At runtime, your application obtains STS tokens through IDaaS to access cloud resources — no static AccessKeys required.

  • IDaaS Core SDK

  • IDaaS Akless Alibabacloud Adapter

Credential Management

Create credentials or credential providers (OAuth 2.0, JWT) in IDaaS. At runtime, your application retrieves and uses these credentials through IDaaS.

  • IDaaS Core SDK

  • IDaaS Pam Client

Agent ID

An agent acts as a client application, authenticating through multiple methods to obtain outbound credentials securely.

  • IDaaS Core SDK

  • IDaaS Pam Client

Prerequisites and Setup Notes

Before you begin, ensure that you have:

  • An active IDaaS EIAM instance

  • An M2M application registered in IDaaS

  • (For OpenAPI authentication) The required RAM permission policy configured in Alibaba Cloud

  1. IDaaS Core SDK requires a configuration file:

    Language

    Documentation

    Java

    Python

  2. When using IDaaS OpenAPI authentication, complete the RAM permission policy configuration in Alibaba Cloud. For details, see Alibaba Cloud OpenAPI authentication.

  3. In the Agent ID scenario, configure the agent as a client application:

    • In the configuration file, set client_id to the agent's Agent ID and configure the agent's authentication method.

    • If using IDaaS OpenAPI authentication, set the ApplicationId field in the Resource of the permission policy to the agent's Agent ID.

Previous：Get an M2M client tokenNext：Java SDK