Requesting an access token

The client credential flow is fairly simple, you make one request to the token endpoint of Multitenant Access Control, and you will receive an access token in return. This token can then be used to authenticate your requests to the public API. The token is valid for a short duration (usually about 5 minutes), after which you will need to request a new token, so it is recommended to automate the fetching of the token before sending the requests to the public API.

For exact details on how to request a token, please refer to the dev guide of Multitenant Access Control.

Please note that you will need the openid and the aud:<smessentials client id> scopes when requesting the token. The openid scope is required for smessentials to be able to read the roles of the user and the aud:<smessentials client id> scope is required for Multitenant Access Control to create the token for smessentials applications.