Expand my Community achievements bar.

Interested in becoming an Adobe Analytics Champion? Join us on May 15 at 9 am PT, and learn how to become a 2025 Adobe Champion.
SOLVED

Multi tenancy for the OAuth web api in projects - Adobe analytics.

Avatar

Level 1

Hi,

We at Striim are working on building a reader for Adobe Analytics. In the developer console, we have created a project for Adobe experience cloud and analytics. We have created a OAuth Web API and are using the client ID and secret to make the authorization calls and token generation calls. The question is can someone, outside of Striim Technology partner account, be able to authorize and generate tokens using Striim's OAuth web API. Is there a way to support multi tenancy where Striim using the OAuth web API, can access the user's instance after authorization by the user, and read user's data ?

 

Topics

Topics help categorize Community content and increase your ability to discover relevant content.

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

Hi @NavinK1 ,

OAuth Web API by default allows user authorization from any user with Adobe ID i.e. this method is not limited to users of the organization under which the project is created. This is because the user access to identified based on what kind of permissions they have in their organization which is readd on user's login to the app.

You can test it using OAuth 2.0 Playground where if you login with an user from different org you will still get the access token generated.

View solution in original post

1 Reply

Avatar

Correct answer by
Community Advisor

Hi @NavinK1 ,

OAuth Web API by default allows user authorization from any user with Adobe ID i.e. this method is not limited to users of the organization under which the project is created. This is because the user access to identified based on what kind of permissions they have in their organization which is readd on user's login to the app.

You can test it using OAuth 2.0 Playground where if you login with an user from different org you will still get the access token generated.