Authorize API Requests
To ensure the security of your data and services, all Skyhigh Security SSE REST APIs require a valid IAM v2 Access Token for every request. This token identifies your application and confirms it has the necessary permissions to interact with your tenant.
Authentication Overview
Skyhigh Security uses the OAuth 2.0 standard for API authentication. Instead of using your administrative username and password directly in API calls, you use secure Client Credentials (a Client ID and Client Secret) to request a short-lived Bearer token.
- Token Type. JWT (JSON Web Token)
- Authentication Method. Bearer Token
- Token Lifetime. 600 seconds (10 minutes)
- Security Requirement. All requests must be made over HTTPS.
The Authorization Workflow
The process of authorizing your environment involves three main phases:
- Onboarding. You obtain a one-time Registration Token from Skyhigh Security Support to establish your identity.
- Credential Generation. You exchange that Registration Token for permanent Client Credentials (ID and Secret).
- Token Retrieval. Your application uses those credentials to request an Access Token whenever the previous one expires.
To begin the setup process and generate your first token, see Generate IAM v2 Tokens.