Introduction

Authentication is the act of challenging a party for legitimate credentials, providing the basis for creation of a security principal to be used for identity and access control. In other words, it is the process of proving you are who you say you are. To be able to call the Salto KS APIs, you first need to get authenticated and for that, you need to use our Identity Provider.

Salto KS uses an Identity Provider that implements OpenID Connect, which is an industry-standard authentication protocol implemented on top of OAuth 2.0. The purpose of an Identity Provider is to verify the identity of an end-user using different methods, which depends on the type of application trying to verify that user's identity. Every use of the API requires authentication so Salto can make sure that only authorized users can interact with KS content.

Your application needs to obtain a token before it can make API calls. As there are different application types, it is important to notice that there are different tokens for different use cases.