# March 12, 2026 - Improved Java SDK support for external IAM tokens with user scope API beans

**URL:** <https://community.cumulocity.com/t/march-12-2026-improved-java-sdk-support-for-external-iam-tokens-with-user-scope-api-beans/14377>\
**Category:** Application Enablement\
**Tags:** app-enablement, Improvement, java-sdk\
**Created:** [March 17, 2026, 7:24am UTC](https://community.cumulocity.com/t/march-12-2026-improved-java-sdk-support-for-external-iam-tokens-with-user-scope-api-beans/14377 "2026-03-17T07:24:37Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cumulocity](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/cumulocity/32/31990_2.png) [@cumulocity](https://community.cumulocity.com/u/cumulocity)\
**Post date:** [March 17, 2026, 7:24am UTC](https://community.cumulocity.com/t/march-12-2026-improved-java-sdk-support-for-external-iam-tokens-with-user-scope-api-beans/14377/1 "2026-03-17T07:24:37Z")

</div>

## Context

* * *

**Change Type:** Improvement  
**Product area:** Application enablement & solutions  
**Component:** Java SDK  
**Deployed at:** [eu.latest.cumulocity.com](http://eu.latest.cumulocity.com), [apj.cumulocity.com](http://apj.cumulocity.com), [jp.cumulocity.com](http://jp.cumulocity.com), [cumulocity.com](http://cumulocity.com), [us.cumulocity.com](http://us.cumulocity.com)

> **Technical details**
>
> **Build artifact:** cumulocity (2026.14.0)  
> **Internal ID:** MTM-66206

## Description

* * *

Previously, when users authenticated in the Java SDK using [external IAM JWT tokens](https://cumulocity.com/docs/authentication/sso/#configuring-access-tokens) together with [API service beans](https://cumulocity.com/docs/microservice-sdk/java/#api-service-beans) configured with the qualifier for user scope, the authentication process could fail to identify the tenant and user correctly.  
With this improvement, service beans using the qualifier for user scope can now authenticate correctly when external IAM JWT tokens are used. Their behavior is now consistent with other supported authentication methods.