Skip to main content
Enfuce follows the OAuth 2.0 authorisation method. To access our APIs, you must follow the OAuth 2.0 Client Credentials grant.

​
Authorisation Request

Send a request to the Enfuce authorisation server, including your Client ID and Client Secret:
  • Endpoint: /oauth2/token
  • Method: POST
  • Each Enfuce customer would receive access to two environments — Sandbox/UAT and Production. The client credentials are environment specific.
  • Your onboarding manager would share with you the Client ID and the Client Secret.

​
Authorisation Response

If the request to the Enfuce authorisation server is valid with correct client_id and client_secret, we return an access token that you must include in the authorisation header of every API request.
  • access_token: Include this token in the authorisation header of every API request.
  • expires_in: The validity of the access token in seconds.
  • token_type: Bearer token
The access tokens are short-lived — if the token expires, send another request to the Enfuce authorisation server to obtain a new token.

​
Environment Specific URLs Structure

  • Sandbox environment: https://auth.[TENANT].ext-uat1-sandbox.mycore.enfuce.com/oauth2/token
  • Production environment: https://auth.[TENANT].eu.live.prod.mycore.enfuce.com/oauth2/token