Skip Navigation
Expand
Using Client ID / Client Secret for AuthenticatingĀ SOAP requests
Answer ID 10971   |   Last Review Date 10/16/2019

How do I use Client ID / Client Secret for Authenticating SOAP requests?

Environment

Oracle Field Service (OFS)

Resolution

Client_ID/Secret Authentication can be used in SOAP API as username/password analogy.
 
All customers can use the Client_ID and Client_Secret instead of login and password to populate the User Authentication Structure with credentials:

1. Register an application.

1.1. In the Field Service Cloud Manage interface, click Configuration and select Applications.
1.2. In the left pane, click the plus icon to open the New application window, specify the Application Name and Application ID, and click Submit.
1.3. Under Authentication settings, select the Authenticate using Client ID/Client Secret check box.
1.4. Make a note of the Client ID and Client Secret.
1.5. Click Save.

2. Configure the APIs that should be available for the created application

            2.1. Under API access section, select the plus icon.
            2.2. Select the APIs to be granted to this application.
            2.3. Click Save.

Observe that some APIs require a configuration of the layout with the fields/properties that are expected to be available.
 
Example:

For this example we will be using sunrise_cable as the instance/company name. Let's assume the Client ID is 'test_app' and the generated Client Secret is '5634834a68becc7dce7faa4c26546058db5a68becc7dce7f'.

Referring to the documentation (Outbound Interface Entities and Structures) where the <user> node is specified we should have the following result:

CURRENT_TIME = 2019-07-17T16:25:50-04:00
CLIENT_ID = test_app
CLIENT_SECRET = 5634834a68becc7dce7faa4c26546058db5a68becc7dce7f
INSTANCE_NAME = sunrise_cable
SHA256(CURRENT_TIME + SHA256(CLIENT_SECRET + SHA256(CLIENT_ID))) = 3e0faf3300d082506d92c340869c0694a2be120916970b1cdb6b96969a8167fb

<user>
    <now>2019-07-17T16:25:50-04:00</now>
    <login>test_app</login>
    <company>sunrise_cable</company>
    <auth_string>3e0faf3300d082506d92c340869c0694a2be120916970b1cdb6b96969a8167fb</auth_string>
</user>