guidewire-install-auth | guidewire-pack

Stats

Actions

Tags

guidewire-install-auth | guidewire-pack

Guidewire Install & Auth

Overview

Set up Guidewire InsuranceSuite development: install Guidewire Studio (IntelliJ-based), configure Cloud API OAuth2 authentication via Guidewire Hub, and obtain JWT tokens for PolicyCenter, ClaimCenter, and BillingCenter APIs.

Prerequisites

JDK 17 (Guidewire Cloud 202503+)
Gradle 8.x
Guidewire Cloud Console (GCC) access at https://gcc.guidewire.com

Instructions

Step 1: Register Application in Guidewire Hub

GCC > Identity & Access > Applications > Register Application

Service Application (backend): OAuth2 Client Credentials flow
Browser Application (Jutro): OAuth2 Authorization Code flow

Record: client_id and client_secret

Step 2: Configure OAuth2 Environment

# .env (NEVER commit)
GW_AUTH_URL=https://guidewire-hub.guidewire.com/oauth/token
GW_CLIENT_ID=your_client_id
GW_CLIENT_SECRET=your_client_secret
GW_PC_URL=https://your-tenant.guidewire.com/pc/rest
GW_CC_URL=https://your-tenant.guidewire.com/cc/rest
GW_BC_URL=https://your-tenant.guidewire.com/bc/rest

Step 3: Obtain Access Token

async function getGuidewireToken(): Promise<string> {
  const res = await fetch(process.env.GW_AUTH_URL!, {
    method: 'POST',
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    body: new URLSearchParams({
      grant_type: 'client_credentials',
      client_id: process.env.GW_CLIENT_ID!,
      client_secret: process.env.GW_CLIENT_SECRET!,
      scope: 'pc.service cc.service bc.service',
    }),
  });
  const { access_token } = await res.json();
  return access_token;
}

Step 4: Verify Connection

TOKEN=$(curl -s -X POST "$GW_AUTH_URL" \
  -d "grant_type=client_credentials&client_id=$GW_CLIENT_ID&client_secret=$GW_CLIENT_SECRET" \
  | jq -r '.access_token')

curl -s -H "Authorization: Bearer $TOKEN" \
  "$GW_PC_URL/account/v1/accounts?pageSize=1" | jq '.count'

Error Handling

Error	Cause	Solution
`invalid_client`	Wrong credentials	Verify client_id/secret in GCC
`invalid_scope`	Unauthorized scope	Check API role assignments
`401 Unauthorized`	Expired token	Refresh (tokens are short-lived)
`403 Forbidden`	Missing API role	Assign roles in GCC > Identity & Access
`PKIX path building failed`	SSL cert issue	Import Guidewire CA certificates

For detailed implementation, see: implementation guide

Resources

Next Steps

After auth, proceed to guidewire-hello-world for your first API calls.