--- schema_version: "1" id: ddc2667bc381903ebdb5314628179c59dfe22082b6d55b567ad467d304863bfa title: Configuring Organization Credentials in Mule Runtime 4 collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/mule-gateway/mule-gateway-org-credentials-mule4.md canonical_url: https://docs.mulesoft.com/mule-gateway/mule-gateway-org-credentials-mule4 source_site: docs.mulesoft.com content_type: documentation content_hash: a572a8da089a43ad824018db3cb75ec070f85c489652a50e0cddc0053193cbf5 description: MuleSoft Documentation Site latest: true --- --- product: Mule Gateway --- # Configuring Organization Credentials in Mule Runtime 4 > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Organization credentials provide a way to uniquely identify a specific environment, an organization, or a business group when linking Mule runtime engine (Mule) to an organization using Anypoint Platform. Credentials for environments, organizations, and business groups consist of two keys: the client ID and a client secret. Mule uses these credentials to connect to and access your organization. The recommended way to link Mule to Anypoint API Manager (API Manager), is by using the environment client ID and secret. You may also use the organization client ID and secret, or even business group credentials if you want to track APIs defined in business groups linked to Mule or belonging to a parent business group linked to Mule. When you use environment credentials, you can manage APIs that are specific to only that environment. If your APIs are in different environments of Anypoint Platform, you must specify instead the credentials of the organization that contains both environments. You can also use parent organization credentials to manage child organization APIs. For example, if ACME is the parent organization and Logistics is a business group (child organization) within ACME, your API Administrator can track APIs created in Logistics using the credentials of either Logistics or of ACME. You can identify client applications with client ID and secret. However, it is recommended that client application credentials not be used in place of organization credentials. Otherwise Mule is not linked correctly to the organization. You can only successfully pair Mule to your organization if Mule is started using Anypoint Platform credentials that are already configured. If you provision an adapter with organization credentials, you can manage APIs on only that specific adapter of your organization. ## Obtaining Credentials Because you are required to provide credentials from time to time when using API Manager, you might need to obtain these credentials for various client applications. You can obtain environment and organization credentials using the procedures explained in this section. ### Obtaining Environment Credentials (Recommended) To obtain environment credentials: 1. Log in to Anypoint Platform as an administrator, and click **Access Management**. 2. Click the **Environments** tab and click the name of your environment within your desired organization. ![The credentials for the environment in Mule 4](/mulesoft/current/en-us/mule-gateway/_images/environment-api-manager.png) Remember that environment credentials are only available in the post-crowd (November 2017) release version of the platform. ### Obtaining Organization Credentials To obtain organization credentials: 1. Log in to Anypoint Platform as an administrator, and click **Access Management**. 2. Click the **Organization** tab and click on the name of your organization or corresponding Business Group. ![A form displays organization information, including names, IDs, and a client secret in Mule 4](/mulesoft/current/en-us/mule-gateway/_images/orgid-api-manager.png) ## Configuring Credentials for Standalone Deployments ### Automatic Runtime Manager Agent Setup Mechanism If you are setting up a stand alone instance, and you would like to register the Runtime Manager agent: 1. Log in to Anypoint Platform as an administrator, and click **Runtime Manager**. 2. Click the **Servers** tab, then **Add Server**. 3. Run the command you are prompted to run. This command looks similar to this: ```text /bin/./amc_setup -H bb123456-789c-1234-9fd3-58f4b5e2d82e---123 server-name ``` Where `MULE_HOME` is a variable holding the root directory of the Mule installation. For example, `/opt/Mule/mule-enterprise-standalone/`. Executing this command configures your runtime agent, and the automatically adds the correct organization credentials to your Mule with the correct organization credentials and URLs, so your Mule is linked to a specific organization. After registering the agent, the wrapper.conf file is modified with the required data so configuration changes are made persistent. ### Manual Configuration If you are setting up an on premises instance to point to a specific organization, you need to add your credentials in the `wrapper.conf` file (persistent approach) or specifying the credentials data using the command line. #### Using the Wrapper.conf File The configuration file is placed in the `/conf` directory, where MULE\_HOME is a variable holding the root directory of the Mule installation. 1. Navigate to your $MULE\_HOME directory. 2. Open the file located in `/conf/wrapper.conf`. 3. Add your Anypoint Platform Organization credentials like shown below: ```text wrapper.java.additional.=-Danypoint.platform.client_id=XXXXXXXX wrapper.java.additional.=-Danypoint.platform.client_secret=XXXXXXXX ``` `` must be a unique number, not used by any other entry in that file. We recommend you to use the next incremental value over the previous entries in the list. If two or more lines use the same `` identifier, only the first value with that number is taken into account. If your organization is defined in the EU control plane, you need to define two additional keys: ```text wrapper.java.additional.=-Danypoint.platform.base_uri=https://eu1.anypoint.mulesoft.com wrapper.java.additional.=-Danypoint.platform.analytics_base_uri=https://analytics-ingest.eu1.anypoint.mulesoft.com ``` #### Using the Command Line You can pass your credentials at start up time by using the following arguments: Mac OS X / Linux ```console MULE_HOME/bin/mule \ -M-Danypoint.platform.client_id=XXXXXXXX \ -M-Danypoint.platform.client_secret=XXXXXXXX ``` Windows ```console MULE_HOME\bin\mule.bat -M-Danypoint.platform.client_id=XXXXXXXX -M-Danypoint.platform.client_secret=XXXXXXXX ``` If your organization is defined in the EU control plane, you should define the base URLS by adding two additional keys: Mac OS X / Linux ```console MULE_HOME/bin/mule \ -M-Danypoint.platform.client_id=XXXXXXXX \ -M-Danypoint.platform.client_secret=XXXXXXXX \ -M-Danypoint.platform.base_uri=https://eu1.anypoint.mulesoft.com \ -M-Danypoint.platform.analytics_base_uri=https://analytics-ingest.eu1.anypoint.mulesoft.com ``` Windows ```console MULE_HOME\bin\mule.bat -M-Danypoint.platform.client_id=XXXXXXXX -M-Danypoint.platform.client_secret=XXXXXXXX -M-Danypoint.platform.base_uri=https://eu1.anypoint.mulesoft.com -M-Danypoint.platform.analytics_base_uri=https://analytics-ingest.eu1.anypoint.mulesoft.com ``` The same applies if you are pointing at an organization defined in a Private Cloud Edition. You would need to provide the URLs for your Private Cloud Edition installation. ## Configuring Credentials for Anypoint Studio 7 You can configure Studio 7 to work with your Anypoint Platform organization for testing connectivity and governance applied to endpoints. 1. In Anypoint Studio, click **Anypoint Studio** from the top menu bar, and **Preferences**. 2. Under Anypoint Studio, click **API Manager** 3. Type in the client ID and secret under **Environment Credentials**: ![A form that enables the input of API platform and analytics URIs](/mulesoft/current/en-us/mule-gateway/_images/configure-autodiscovert-4-studio.png) If your organization is defined in the EU control plane, then you must also specify the base URL for that plane: ![A form for entering Anypoint Platform API pairing properties with fields for API platform, analytics URIs, and client credentials](/mulesoft/current/en-us/mule-gateway/_images/api-gateway-enabling-0cbca.png) The same applies if you are pointing at an organization defined in a Private Cloud Edition. You would need to provide the URLs for your Private Cloud Edition installation. ## Configuring Credentials in Runtime Manager for your Deployed Application ### Automatic Auto-generated Proxy Deploy Mechanism You can deploy an auto-generated proxy from your API directly to Cloudhub. 1. Log in to Anypoint Platform as an administrator, and click **API Manager**. 2. From the list of available APIs, click the API version of the API from which you want to auto-generate a proxy. 3. Click the **Settings** tab, and navigate to the **Deployment Configuration**. 4. Configure your runtime version and your proxy application name, and click **Deploy**. When you deploy a proxy using this mechanism, the system automatically configures the organization credentials (and URLs, if applicable) for you. You may take a look at them in Runtime Manager → → Settings → Properties. ### Manual Configuration 1. Navigate to **Runtime Manager** in Anypoint Platform. 2. Access the **Properties** section of the deployed application. If the application is being deployed for the first time, the Properties section will appear during the deployment configuration. 3. In the Properties section, add the following properties: ```text anypoint.platform.client_id=XXXXXXXX anypoint.platform.client_secret=XXXXXXXX ``` If your organization is defined in the EU control plane or using a Mule Private Cloud Edition, you should define the base URLS by adding two additional keys: ```text anypoint.platform.client_id=XXXXXXXX anypoint.platform.client_secret=XXXXXXXX anypoint.platform.base_uri=https://eu1.anypoint.mulesoft.com anypoint.platform.analytics_base_uri=https://analytics-ingest.eu1.anypoint.mulesoft.com ``` The same applies if you are pointing at an organization defined in a Private Cloud Edition. You would need to provide the URLs for your Private Cloud Edition installation. ## See Also - [Configuring Mule Gateway API Autodiscovery in a Mule 4 Application](https://docs.mulesoft.com/mule-gateway/mule-gateway-config-autodiscovery-mule4)