IRIS 2025.2 Introduces Native OAuth2 Support for Web Application Authentication

InterSystems IRIS 2025.2 now supports OAuth2 as a native authentication method for web applications, eliminating the need for manual token-validation workarounds. OAuth2 allows third-party apps to access protected APIs using scoped, time-limited, and revocable access tokens instead of sharing user credentials. A typical setup involves four roles: a resource owner, a client app, an authorization server such as Keycloak, and IRIS acting as the resource server that validates tokens and enforces access rules. IRIS can now parse an incoming access token and automatically establish a user context, including username and roles, similar to how other authentication types work. A hands-on demo using Docker, Keycloak, and Postman is available on Open Exchange to help developers reproduce and explore the integration locally.