3 Server-to-server authentication

This section provides information on setting up server-to-server authentication for the MyID Core API. This allows you to call the MyID Core API from an external system.

To set up server-to-server authentication, you must carry out the following:

• Configure MyID with a user account that has the appropriate permissions to access the API.

  See section 3.1, Configuring MyID for server-to-server authentication.

• Configure the web.oauth2 web service with the ID of your external system and a shared secret.

  See section 3.2, Configuring web.oauth2 for server-to-server authentication.

• Obtain an access token for your system to use.

  See section 3.3, Obtaining a server-to-server access token.

For more information, see the Client Credentials section of the OAuth 2.0 Authorization Framework:

tools.ietf.org/html/rfc6749#section-1.3.4