- Create a Commerce Studio integration with Fusion
- Create Fusion roles required for Commerce Studio
- Create a Fusion security JWT realm for Commerce Studio
- Create the lwp service account in the JWT realm
- Verify Commerce Studio integration with Fusion
- Create a Commerce Studio instance using the UI
Prerequisites
To create an integration, you must have the following prerequisites in place:- Admin privileges to a self-hosted Fusion environment running Fusion 5.9.8 or later.
- A Fusion application that contains usable data.
- Workspace Owner permissions in a Lucidworks Platform environment.
- Privileges to access and use Lucidworks Commerce Studio in a Lucidworks platform workspace.
Network access requirements: Lucidworks Platform must be able to reach the Fusion API URL you provide. Your Fusion instance must also be able to reach the Lucidworks JWK endpoint (
https://api.lucidworks.com/customers/) to retrieve JSON Web Key Sets during JWT authentication. This endpoint is hosted on a separate IP range from the Lucidworks Platform itself. To obtain the IP ranges to add to your network allowlist, or for help configuring proxy access through the Fusion API gateway, contact Lucidworks support.Create a Commerce Studio integration with Fusion
Complete the following procedures to create an integration from Lucidworks Commerce Studio to Fusion.- Navigate to the megamenu and click Settings > Fusion Integrations.
- Click Connect New Fusion.
-
In the Name field, enter a unique name for the integration. For example,
Lucidworks Demo Dev. -
In the API URL field, enter the URL of your Fusion instance. For example,
https://FUSION_INSTANCE.com. Do not enter a path after.com. - In the Environment field, select the Fusion instance environment or use the default of Development.
-
Optional: Enter one or more descriptive Tags that differentiate multiple integrations.

- Do not enter values in any of the fields in the GitHub section. Values in these fields are only required to set up the Configuration Promotion tool integration with Fusion.
-
Click Add. Lucidworks Platform sends a
GET /apirequest to your Fusion API gateway to validate the connection. If that request cannot reach your Fusion instance, the integration will not be created. If the value in the API URL field is:- Not valid, the integration is not created, and it is not displayed on the Fusion Integrations screen.
-
Valid, the Instructions to Connect with Fusion screen displays:

- Copy both the JWK Set URL value and the Issuer URL value to a secure location. These values must be used to create the JWT realm and are not displayed again after you click Close.
- Click Close.
- Verify the new integration displays on the Fusion Integrations screen.
To edit the integration, hold the pointer over the integration, click the pencil icon, enter the changes, and click Save. To delete the integration, hold the pointer over the integration and click the trash can icon.
Create Fusion roles required for Commerce Studio
- Sign in to your Fusion instance as an admin and click the Fusion application to connect with Commerce Studio.
- Navigate to System > Access Control > Roles and click Add Role.
-
In the Name field, enter
lwp_user. -
In the Permissions field, enter:
Each permission grants the following access:
GET,PUT,DELETE,POST,HEAD:/query/experience-manager/**: Commerce Studio query endpoints (read/write) for Commerce Studio UI and rule management.GET,POST:/query/*: Query execution endpoints (read/write).POSTsends query parameters in the request body and does not create or persist any configuration in Fusion.POST:/query/*/preview: Rule preview endpoint (write) to view rule results without publishing them to production.GET,POST,PUT:/query-pipelines/**: Query pipeline configuration (read/write) to manage pipeline stages used by Commerce Studio.GET:/suggestions/**: Autocomplete and typeahead suggestions (read-only).GET:/solr/*/terms: Solr term analysis (read-only) to view field values and vocabulary.PUT,POST,GET:/apps/*/query-pipelines/**: Application-scoped query pipeline management (read/write) to manage app-specific pipeline operations.GET:/apps/*/query-profiles/**: Query profiles (read-only) to view search configuration profiles.GET,PUT:/apps/*: Fusion application settings (read/write) to view and update app metadata.POST:/apps/*/query/**: Run queries (write) against a specified app’s query profile without modifying the app.GET:/solr/*/admin/luke: Solr index schema inspection (read-only) used to view available fields.GET:/solr/**: General Solr read access (read-only).
-
In the Description field, enter role information. For example, “The lwp_user account is required to access and use Commerce Studio. It is a super user account, but does not include the ability to get, modify, or delete the
HEADsection of the site.” - Click Save.
- Click Add Role.
-
In the Name field, enter
lwp_service_account. -
In the Permissions field, enter the following permissions. These permissions include most of the lwp_user account permissions plus the privileges to migrate Fusion Predictive Merchandiser rewrites, rules, templates and zones.
The
lwp_service_accountrole includes mostlwp_userpermissions plus the following additional permissions that are required to migrate Predictive Merchandiser to Commerce Studio:GET,DELETE,PATCH,PUT,POST,HEAD:/apps/*/query-rewrite/**: Query rewrite rules (read/write) to migrate Predictive Merchandiser rewrites, rules, and zones to Commerce Studio.GET,HEAD:/templating/**: Templating access (read-only) to access Predictive Merchandiser templates during migration.
- In the Description field, enter role information. For example, “The lwp_service_account contains most of the lwp_user permissions as well as the privileges to migrate Fusion Predictive Merchandiser components to Lucidworks Commerce Studio.”
- Click Save.
The
PUT,POST,GET:/apps/*/query-pipelines/** permission reflects the requirement to assign all necessary query pipeline permissions to the lwp_user and lwp_service_account roles. An additional example is for configuring a Lucidworks AI Gateway integration, where you need to assign POST:/your-account-name/.Create a Fusion security JWT realm for Commerce Studio
- Sign in to your Fusion instance as an admin and click the application in which you created the
lwp_userandlwp_service_accountaccounts to use with Commerce Studio. - Navigate to System > Access Control > Security Realms and click Add Security Realm.
- In the Name field, enter a unique connection name. For example, Lucidworks Commerce Studio JWT realm.
- In the Type field, select jwt.
- Set the checkboxes in the following configuration.
- Select the Enabled checkbox.
- Do not select the Ephemeral Users checkbox.
- Select the Auto-Create Users checkbox.
- In the Roles field, select
lwp_user. - In the JWT Issuer field, paste the Issuer URL value generated in the Create a Commerce Studio integration with Fusion procedure.
- In the JWK Set URL field, paste the JWKS URL value generated in the Create a Commerce Studio integration with Fusion procedure.
- In the JWK Set Timeout field, enter a timeout value in milliseconds for retrieving the JWKS.
- This field is required.
- Minimum value:
500ms (set higher for known network latency).
- Do not enter values (default is blank) in any of the following fields:
- Signing Key
- Groups Key
- Groups Mapping
- User ID Attribute
- Click Save.
Self-hosted Fusion clients can also view the integration
ID, Issuer URL, JWKS URL, and other integration details in Settings > Fusion Integrations when the existing integration is selected. For general information, see Lucidworks Platform integration with Fusion. Integrations for Lucidworks Search clients are created and updated by Lucidworks.Create the lwp service account in the JWT realm
- Sign in to your Fusion instance as an admin and click the application to be connected with Commerce Studio.
- Navigate to System > Access Control > Users and click Add User.
- In the Realm field, select the JWT realm you created in the Create a Fusion security JWT realm for Commerce Studio.
- In the Username field, enter
lwp-service-account. - In the Roles field, select the
lwp_service_accountrole. - In the Timezone field, select the appropriate timezone for the user account.
- Click Create.
Verify Commerce Studio integration with Fusion
When the Fusion security JWT realm is created, complete the following steps to verify the Fusion information is displayed.- Navigate to the megamenu and click Settings > Fusion Integrations.
- Hold the pointer over the integration and click the pencil icon.
-
Verify the information is accurate.
The information in the Instructions section must match the values in the Additional URLs JWKS URL and Issuer URL fields.
Create a Commerce Studio instance using the UI
- In Lucidworks Platform, navigate to Commerce Studio and click Create New.
- In the Name field, enter a unique name for the Commerce Studio instance.
- In the Region field, select the geographic region for the Commerce Studio instance. This cannot be changed after the instance is created.
- In the Fusion to Connect field, select the Fusion integration instance that matches the Name field created in the Create a Commerce Studio integration with Fusion procedure.
- Optional: In the Signal Store field, select the location where the Commerce Studio signals are stored. This value is only required if you want to use Lucidworks Analytics.
- In the Fusion Application field, enter Lucidworks Platform application that connects to your Fusion instance.
- Click Next to confirm settings, and then Next to create the instance.
Data from the Fusion app is sent to Commerce Studio so you can create rules and refine the search experience. You can only connect one instance of Commerce Studio to a Fusion app. You cannot create multiple instances of Commerce Studio using the same Fusion app.
Troubleshooting
These errors may occur when Commerce Studio communicates with Fusion. When an error response includes afusionErrorMessage field, use the message contents to identify the cause.
400 error
400 error
The Commerce Studio instance status in Fusion may have been removed or disabled.
Manually set the status back to
READY (if in preview mode) or CONNECTED (if already live).401 or 403 error
401 or 403 error
The JWT security realm used by Commerce Studio is not configured correctly.
Verify that the JWT realm is configured as described in Create a Fusion security JWT realm for Commerce Studio.If the realm configuration is correct, an expired JWT may be reaching Fusion.
Contact Lucidworks support.
In some network environments, a JWT realm misconfiguration, particularly when Fusion cannot reach the JWKS endpoint, can surface as a 500 error rather than a 401 or 403.
If you are investigating a 500 error and cluster health appears normal, also check the JWT realm configuration and network egress to the JWKS endpoint.
500 or an unexpected response error
500 or an unexpected response error
This typically indicates a problem with the Fusion instance itself.
Check the details of the returned error response to determine the cause:
- “Could not find a healthy node” — The Fusion cluster cannot reach a healthy Solr node. Contact your Fusion instance administrator or Lucidworks support.
- “Connection reset”, “interrupted”, or “timed out” — The Fusion cluster may be overloaded or have a configuration issue causing slow responses. Contact your Fusion instance administrator.
- JWT realm / JWKS endpoint unreachable — If Fusion cannot reach the Lucidworks JWKS endpoint, for example, due to a firewall or proxy blocking egress, it fails to retrieve JWT signing keys and may return a 500 to Commerce Studio instead of a 401 or 403. Check egress rules, proxy configuration, and the JWT realm setup even when the error is a 500. See network access requirements and the JWT realm configuration steps.