Authorization Code

Use this grant type for configurations that use Federated accounts without Azure Active Directory as the underlying Identity Provider.

For this process, the auth code flow requires the Oauth flow to redirect the API to access Ennov InSight . You will be able to generate a time expiring code that grants access to the API.

To generate this code, you should have an account configured in Security Administration with appropriate permissions.

The Audit Trail defines all the operations in logs as the specific user that generated the access token.

If an appropriate redirect_uri is not configured in the Azure Portal - App Registration, this process becomes a manual operation to provide the code to the API.

As the Bearer Token Generated expires quickly, it is recommended that the Authorization Code grant is generated with the “offline_access” scope. This way the refresh_token grant can be utilized on subsequent API authentication requests.