Pre-requisite:

To impose an approval process for consumer registration process, ensure that you have created the required Consumer Registration design-time policy.

At run-time, you might want to register as consumer an asset instance of a virtual type, for example, an asset of Virtual Service type, in which case you would have to specify the authentication settings or consumer identifiers or both, and would invoke the asset to query and obtain the data. This would help to indicate the run-time asset usage.

An API provider (owner of the API) specifies the type of authentication (API key or OAuth2 token using the consumption settings) and configures a set of Evaluate * actions (using the run-time policies) to identify and authorize the consumer that request the consumption access to the metadata of the particular API. Based on the specified enforcement definitions for the API, CentraSite offers interactive user interfaces for the following four exemplary scenarios: