DEVELOPER CENTER
I totally understand what you're trying to do I just think you could go about it in a different way. If you use Client Credentials Grant you will have global access to the whole system then you can have authentication in your own application for customers separate to simPRO but as you have global data access you will then be able to map customers to their customerID in simPRO to show them their data and allow them to make changes.
I would suggest something like this:
Your system sends an email invitation to the customer with a unique link for them that will map their user profile with their customerID in simPRO. They then set a unique password for your system. When they login into your system you display their data using the global credentials to pull all data for that customer ID and proceed from there. No need for your system to ever know what the individuals' customers login details are for simPRO.
Good luck!
API - Resource Owner Credentials Grant for customer account
Forum rules
- Check the documentation first. Before posting questions, please check the documentation to ensure it doesn't already cover what you need.
- No spam. All automated messages, advertisements, and links to competitor websites will be deleted immediately.
- Post in relevant sub-forums only. Messages posted in the wrong topic area will be removed and placed in the correct sub-forum by moderators.
- Respect other users. No flaming or abusing fellow forum members. Users who continue to post inflammatory, abusive comments will be deleted from the forum after two warnings are issued by moderators.
- Harassment. No threats or harassment of other users will be tolerated. Any instance of threatening or harassing behavior is grounds for deletion from the forums.
- Adult content. No profanity or pornography is allowed. Posts containing adult material will be deleted.
- Bandwidth. All images and signatures must be 500 x 500 pixels or smaller. Posts containing over-sized images and signatures will be removed.
- Illegal content. No re-posting of copyrighted materials or other illegal content is allowed. Any posts containing illegal content or copyrighted materials will be deleted.
-
rob.ormond
- Posts: 65
- Joined: Wed May 30, 2018 6:05 am
Re: API - Resource Owner Credentials Grant for customer account
Hi,
The basic response back was that you can't use the customer portal login details stored within simPRO for authentication against the API. If you want to make an external customer portal, it would be advisable to handle all the security, access, permissions etc within the external portal, and connect the portal to simPRO using either oAuth2 client credentials grant type, or API key, as Michelle has suggested.
The basic response back was that you can't use the customer portal login details stored within simPRO for authentication against the API. If you want to make an external customer portal, it would be advisable to handle all the security, access, permissions etc within the external portal, and connect the portal to simPRO using either oAuth2 client credentials grant type, or API key, as Michelle has suggested.