Resource Owner Password Credentials
This authentication scheme is relatively simple and allows the application to log into the user's system without having to use the browser by directly processing the username and password instead.
If an external Identity Provider is configured for a tenant, the Resource Owner Password Credentials authentication scheme will not work.
To obtain the access token, use the following:
- A POST request,
- The https://vantage-eu.abbyy.com/auth2/connect/token resource (for users in Western Europe), https://vantage-us.abbyy.com/auth2/connect/token resource (for users in North America), and https://vantage-au.abbyy.com/auth2/connect/token resource (for users in Australia),
If your email address is connected to several accounts in different tenants and you use Resource Owner Password Credentials authentication, use the following resource: https://vantage-eu.abbyy.com/auth2/{tenantId}/connect/token (for users in Western Europe), https://vantage-us.abbyy.com/auth2/{tenantId}/connect/token (for users in North America), and https://vantage-au.abbyy.com/auth2/{tenantId}/connect/token (for users in Australia).
The https://vantage-eu.abbyy.com/auth (for users in Western Europe), https://vantage-us.abbyy.com/auth (for users in North America), and https://vantage-au.abbyy.com/auth (for users in Australia) resources are deprecated. - A Content-Type header with the application/x-www-form-urlencoded encoding;
- A request body with the following parameters:
Parameter | Description |
---|---|
grant_type=password | Specifies that the password grant type is used. |
scope=openid permissions global.wildcard | Specifies the permission scope. |
username and password | Your credentials. |
client_id |
Application identifier. For information on how to create a Vantage API Client (client_id and client_secret), see the Managing Tenant Vantage API Clients article. |
client_secret |
Secure application key. For information on how to create a Vantage API Client (client_id and client_secret), see the Managing Tenant Vantage API Clients article. |
The values for grant_type, scope should be exactly as specified above. These keys are subject to change. Please put them in your configuration files, so that you can easily change them without rebuilding your entire integration.
Sample request:
For Windows
For Linux
The server's response to your request will contain the access token:
Response
For more information about Resource Owner Password Credentials, visit this link.
12/22/2023 12:36:42 PM