Smart APIs are designed with security in mind, using OAuth2.0 and OpenID Connect (OIDC) to provide secure access control and authentication mechanisms.
OAuth
To learn about OAuth, see the OAuth website. In particular, you might find the following helpful:
In addition, you might find the following resources from Okta helpful:
-
Implement authorization by grant type.
Smart Completions supports specific grant types for specific identity providers in each installation environment.
OpenID Connect
To learn more about Open ID Connect, see the OpenID Connect website. In particular, you might find the following helpful:
In addition, you might find the following resource from Okta helpful: