API Keys and Access Federation

JFrog Platform Administration Documentation

Content Type
Administration / Platform
ft:sourceType
Paligo

JFrog Platform allows users to use API key for authentication, which is being deprecated. Using API keys with Access Federation instead of using access tokens have shown to cause several issues like loss of API keys after enabling Access Federation.

For example, when Access Federation is enabled, the user with the most recent modified date picks up to be federated. The user that was created in a JPD gets updated with the same user that was more recently modified from another JPD while overwriting the user custom data, which results in the removal of API key. Such a change requires the changes to be restored from a database backup.

To avoid such issues, we strongly recommend that you move out of API keys and adopt Access Tokens to avoid issues in Access Federation.