Ennov InSight API Authentication OAuth 2.0

OAuth 2.0 protocol is used to authorize access to protected resources.

Authorized client application access to protected resources like web APIs is obtained by Microsoft supported

OAUTHv2 flow.

Depending on the Azure Portal configuration, some of the values below may not be required.

Ennov InSight includes the following grant access types:

Grant Type Description

Resource Owner

Password Credentials

(ROPC)

 Used where specified user credentials are supplied in the authentication request.
Client Credentials Used by the built-in "Data Exchange" user.
Authorization Code The code generated after a user logs on with the credentials. This code is supplied to the API.
Device Code Used to allow access to a device from a remote site in a multi-factor authentication. User authentication is still required via the browser to gain access.
Refresh Token Authorizes servers to use temporary access tokens without the need for a user to authenticate with the token expires. Refresh Token is also known as Offline Access.