WSO2 Identity Server- Should an end user of a Mobile application be persisted in User Store?

0
votes

We have a mobile application in android,we are using WSO2 API Manager 2.0.0 and WSO2 Identity Server 5.2.0 for API management that will be consumed by Mobile Application. We have configured Identity server as Key store.

My question:- Is it necessary that we need to store end user details in user store for providing access token? Or the Mobile application can store the consumer key of the application that has subscribed to APIs needed by the mobile application i.e End user details are not stored in User store of Identity server.

1
wso2wso2iswso2-amwso2carbon

1 Answers

0
votes

It completely depends on your requirement. You can either use Application Tokens or User Tokens. If you use Application Tokens, only the application developer being in the userstore is sufficient.

The drawback of this method is you can't identify which user really invoked which request.