fix broken links in api security.

Author: dushaniw

en/docs/api-security/design-time/configuring-api-security-audit.md

@@ -81,7 +81,7 @@ You need to add the API Token and Collection ID properties inside the configurat
 #### Enable Audit API for a single tenant
 
 !!! tip
-    For more information on creating a tenant, see [Managing Tenants]({{base_path}}/administer/product-administration/multitenancy/introduction-to-multitenancy/).
+    For more information on creating a tenant, see [Managing Tenants]({{base_path}}/administer/multitenancy/managing-tenants/).
 
 1.  Navigate to the Admin Console [https://localhost:9443/admin](https://localhost:9443/admin) and sign in with your tenant credentials.
 

en/docs/api-security/key-management/applications/provisioning-out-of-band-oauth-clients.md

@@ -80,7 +80,7 @@ Follow the instructions below to provision the out-of-band OAuth2 client that yo
 
 5.  Create an application. 
 
-     For more information, see [Create Application]({{base_path}}/consume/manage-application/create-application).
+     For more information, see [Create Application]({{base_path}}/api-developer-portal/manage-application/create-application).
 
 6.  Click on the respective application to view the credential details.
 
@@ -105,10 +105,10 @@ Now you have successfully mapped an out-of-band OAuth client to an application.
 
 ## Step 4 - Invoke an API
 
-1. [Subscribe to an API]({{base_path}}/consume/manage-subscription/subscribe-to-an-api) via this application.
+1. [Subscribe to an API]({{base_path}}/api-developer-portal/manage-subscription/subscribe-to-an-api) via this application.
 
 2. Obtain an access token for it.
 
-    You cannot obtain an access token from the Developer Portal for the provisioned applications. You need to use the command line (cURL). For more information, see [Obtain Access Token]({{base_path}}/consume/manage-application/generate-keys/obtain-access-token/overview-of-access-tokens).
+    You cannot obtain an access token from the Developer Portal for the provisioned applications. You need to use the command line (cURL). For more information, see [Obtain Access Token]({{base_path}}/api-developer-portal/manage-application/generate-keys/obtain-access-token/overview-of-access-tokens).
 
-3. [Invoke the API]({{base_path}}/consume/invoke-apis/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console).
+3. [Invoke the API]({{base_path}}/api-developer-portal/invoke-apis/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console).

en/docs/api-security/key-management/authentication/grant-types/client-credentials-grant.md

@@ -6,7 +6,7 @@ For a detailed explanation on this grant type, go to the [WSO2 IS documentation]
 
 ## Flow
 
-The client can request an access token using only its client credentials with this grant type. It is similar to the [resource owner password credentials grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/password-grant) type, except in this case, only the client’s credentials are used to authenticate a request for an access token.
+The client can request an access token using only its client credentials with this grant type. It is similar to the [resource owner password credentials grant]({{base_path}}/api-security/key-management/authentication/grant-types/password-grant) type, except in this case, only the client's credentials are used to authenticate a request for an access token.
 
 [![OAuth Client Credentials]({{base_path}}/assets/img/learn/oauth-client-credentials-diagram.png){: style="width:60%"}]({{base_path}}/assets/img/learn/oauth-client-credentials-diagram.png)
 

en/docs/api-security/key-management/authentication/grant-types/jwt-grant.md

@@ -114,7 +114,7 @@ Now you have a registered identity provider and as well as a service provider wi
 
 1. Obtain a JWT from the service provider.
 
-     Use the following sample cURL command to obtain a JWT from the service provider inside WSO2 IS that we configured in [Step 1](#step-1-obtain-a-jwt-from-an-external-identity-provider). Note that, you can use any `grant_type` when sending the request. For more information, see [OAuth2 Grant Types]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/overview/).
+     Use the following sample cURL command to obtain a JWT from the service provider inside WSO2 IS that we configured in [Step 1](#step-1-obtain-a-jwt-from-an-external-identity-provider). Note that, you can use any `grant_type` when sending the request. For more information, see [OAuth2 Grant Types]({{base_path}}/api-security/key-management/authentication/grant-types/overview/).
 
     === "Format"
         ``` java

en/docs/api-security/key-management/authentication/grant-types/overview.md

@@ -5,11 +5,11 @@ In OAuth2, the term **Grant Type** refers to the way for a client application to
 
 WSO2 API Manager supports following grant types including the basic grant types offered by OAuth2 framework. 
 
-- [Password Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/password-grant)
-- [Client Credentials Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/client-credentials-grant)
-- [Authorization Code Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/authorization-code-grant)
-- [Refresh Token Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/refresh-token-grant)
-- [JWT Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/jwt-grant)
-- [SAML Extension Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/saml-extension-grant)
-- [Kerberos OAuth2 Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/kerberos-oauth2-grant) 
-- [NTLM Grant]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/ntlm-grant)
+- [Password Grant]({{base_path}}/api-security/key-management/authentication/grant-types/password-grant)
+- [Client Credentials Grant]({{base_path}}/api-security/key-management/authentication/grant-types/client-credentials-grant)
+- [Authorization Code Grant]({{base_path}}/api-security/key-management/authentication/grant-types/authorization-code-grant)
+- [Refresh Token Grant]({{base_path}}/api-security/key-management/authentication/grant-types/refresh-token-grant)
+- [JWT Grant]({{base_path}}/api-security/key-management/authentication/grant-types/jwt-grant)
+- [SAML Extension Grant]({{base_path}}/api-security/key-management/authentication/grant-types/saml-extension-grant)
+- [Kerberos OAuth2 Grant]({{base_path}}/api-security/key-management/authentication/grant-types/kerberos-oauth2-grant) 
+- [NTLM Grant]({{base_path}}/api-security/key-management/authentication/grant-types/ntlm-grant)

en/docs/api-security/key-management/authentication/grant-types/password-grant.md

@@ -16,7 +16,7 @@ The diagram below illustrates the resource owner password credentials grant flow
 
 -   A valid user account in the API Developer Portal. You can self sign up if it is [enabled by an admin]({{base_path}}/reference/customize-product/customizations/customizing-the-developer-portal/enabling-or-disabling-self-signup/).
 -   A valid consumer key and consumer secret pair. Initially, these keys must be generated through the API Developer Portal by clicking **GENERATE KEYS** on the **Production Keys** tab of the application.
--   A running API Gateway instance (typically an API Manager instance should be running). For instructions on API Gateway, see [Components]({{base_path}}/getting-started/basic-architecture/#api-gateway).
+-   A running API Gateway instance (typically an API Manager instance should be running). For instructions on API Gateway, see [Components]({{base_path}}/get-started/key-concepts/).
 
 -   If the Key Manager is on a different server than the API Gateway, change the server URL (host and ports) of the Key Manager accordingly by adding following configuration in `<APIM_HOME>/repository/conf/deployment.toml` file.
 

en/docs/api-security/key-management/authentication/grant-types/saml-extension-grant.md

@@ -54,7 +54,7 @@ A sequence diagram explaining the above flow would be as follows:
     [apim.key_manager]
     configuration.ServerURL = "<key-manager-server-url>"
     ```
-    -   A valid SAML2 assertion. For instructions on how to configure WSO2 API Manager with SAML2, see [Configuring API Manager for SSO]({{base_path}}/develop/extending-api-manager/saml2-sso/configuring-single-sign-on-with-saml2/)
+    -   A valid SAML2 assertion. For instructions on how to configure WSO2 API Manager with SAML2, see [Configuring API Manager for SSO]({{base_path}}/reference/customize-product/extending-api-manager/saml2-sso/configuring-single-sign-on-with-saml2/)
 
 
 In this example, **WSO2 Identity Server 5.7.0** is used as the IdP to get a SAML token and the API Manager is used as the OAuth server.

en/docs/api-security/key-management/identity/obtaining-user-profile-information-with-openid-connect.md

@@ -13,7 +13,7 @@ The following two options are available to obtain the actual user information.
 
 Follow the instructions below to obtain user profile information with OpenID connect with WSO2 API Manager.
 
-1.  Obtain a token using password grant type and `openid` scope. For more information on token generation with password grant type, see [Password Grant Type]({{base_path}}/manage-apis/design/api-security/oauth2/grant-types/password-grant/). The format of the curl command and a sample is given below :
+1.  Obtain a token using password grant type and `openid` scope. For more information on token generation with password grant type, see [Password Grant Type]({{base_path}}/api-security/key-management/authentication/grant-types/password-grant/). The format of the curl command and a sample is given below :
 
     === "Format"
         ``` bash

en/docs/api-security/key-management/third-party-key-managers/configure-custom-connector.md

@@ -484,4 +484,4 @@ When registering a third-party Identity Provider as a Key Manager in the Admin P
     !!! tip
         If you want to generate the tokens with scopes, make sure that those scopes are defined in the Authorization Server.
 
-6. You can now use the generated token to [invoke an API]({{base_path}}/consume/invoke-apis/invoke-apis-using-tools/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console).
+6. You can now use the generated token to [invoke an API]({{base_path}}/api-developer-portal/invoke-apis/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console).

en/docs/api-security/key-management/third-party-key-managers/configure-global-key-manager.md

@@ -23,7 +23,7 @@ Follow the steps given below to configure the Global Key Manager
 
     [![Add Global Key Manager]({{base_path}}/assets/img/administer/global-keymanager/add-global-key-manager.png)]({{base_path}}/assets/img/administer/global-keymanager/add-global-key-manager.png)
 
-6. Add the Global Key Manager configurations. Refer to the [configurations]({{base_path}}/administer/key-managers/overview/#configuring-key-managers-with-wso2-api-m) of the key manager that needs to be added as the global key manager
+6. Add the Global Key Manager configurations. Refer to the [configurations]({{base_path}}/api-security/key-management/third-party-key-managers/overview/#configuring-key-managers-with-wso2-api-m) of the key manager that needs to be added as the global key manager
 
     [![Add Global Key Manager Configurations]({{base_path}}/assets/img/administer/global-keymanager/add-global-key-manager-configurations.png)]({{base_path}}/assets/img/administer/global-keymanager/add-global-key-manager-configurations.png)
 
@@ -66,7 +66,7 @@ Let's look at a scenario where a single access token generated for an applicatio
 
 5. Sign in to the WSO2 API Publisher (`https://<hostname>:9443/publisher`) using the super tenant’s admin credentials
 
-6. [Create an API]({{base_path}}/manage-apis/design/create-api/create-rest-api/create-a-rest-api/) (Eg: SampleAPI)
+6. [Create an API]({{base_path}}/api-design-manage/design/create-api/create-rest-api/create-a-rest-api/) (Eg: SampleAPI)
 
     [![Sample API Creation]({{base_path}}/assets/img/administer/global-keymanager/sample-api-creation.png)]({{base_path}}/assets/img/administer/global-keymanager/sample-api-creation.png)
 
@@ -77,13 +77,13 @@ Let's look at a scenario where a single access token generated for an applicatio
 
     [![Relationship between the API's visibility and subscription availability]({{base_path}}/assets/img/learn/api-subscription-availability.png)]({{base_path}}/assets/img/learn/api-subscription-availability.png)
 
-8. [Deploy the API]({{base_path}}/manage-apis/deploy-and-publish/deploy-on-gateway/deploy-api/deploy-an-api/)
+8. [Deploy the API]({{base_path}}/api-design-manage/deploy-and-publish/deploy-on-gateway/deploy-api/deploy-an-api/)
 
 9. Sign in to the WSO2 API Publisher (`https://<hostname>:9443/publisher`) using the new tenant’s (abc.com) admin credentials and repeat Steps 5 - 7
 
 10. Sign in to the super tenant's Developer Portal using the super tenant’s admin credentials (`https://<hostname>:9443/devportal`)
 
-11. [Create an application]({{base_path}}/consume/manage-application/create-application/) (Ex: SampleApp)
+11. [Create an application]({{base_path}}/api-developer-portal/manage-application/create-application/) (Ex: SampleApp)
 
     [![Sample App Creation]({{base_path}}/assets/img/administer/global-keymanager/sample-app-creation.png)]({{base_path}}/assets/img/administer/global-keymanager/sample-app-creation.png)
 
@@ -95,11 +95,11 @@ Let's look at a scenario where a single access token generated for an applicatio
 
 14. Click **GENERATE ACCESS TOKEN** to generate an application access token. Make sure to copy the generated JWT access token that appears so that you can use it in the future.
 
-15. Go to the Developer Portal landing page, select the SampleAPI and [Subscribe]({{base_path}}/consume/manage-subscription/subscribe-to-an-api/#subscribe-to-an-existing-application) to the SampleApp
+15. Go to the Developer Portal landing page, select the SampleAPI and [Subscribe]({{base_path}}/api-developer-portal/manage-subscription/subscribe-to-an-api/#subscribe-to-an-existing-application) to the SampleApp
 
     [![Subscribe SampleAPI to SampleApp]({{base_path}}/assets/img/administer/global-keymanager/subscribe-sample-api-to-sample-app.png)]({{base_path}}/assets/img/administer/global-keymanager/subscribe-sample-api-to-sample-app.png)
 
-16. [Try Out the API]({{base_path}}/consume/invoke-apis/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console/) with the access token generated using the Global Key Manager
+16. [Try Out the API]({{base_path}}/api-developer-portal/invoke-apis/invoke-apis-using-tools/invoke-an-api-using-the-integrated-api-console/) with the access token generated using the Global Key Manager
 
     A Successful response indicates that an API of the super tenant can be invoked using an access token generated for an application using the Global Key Manager.