Skip to main content

Connected App with OAuth 2.0 Client Credentials Flow (Legacy)

This guide explains how to configure a connected app using OAuth 2.0 Client Credentials Flow for Cloudaware CMDB API access.

note

Connected Apps are a legacy feature. Use External Client Apps with OAuth 2.0 Client Credentials Flow for new configurations.

Prerequisites​

Contact your dedicated technical account manager or tam@cloudaware.com to enable the App Manager feature for your Cloudaware account. Once the feature is enabled, proceed with the setup.

Set Up the App​

  1. Log in to Cloudaware → Setup.

  2. Search for Apps in the Quick Find bar. Under External Client Apps, select the Settings tab → New Connected App.

  3. Set a name and a contact email for the connected app. The API name is auto-populated.

  4. Under API (Enable OAuth Settings), check Enable OAuth Settings.

  5. In Callback URL, enter http://localhost:1717/OauthRedirect.

  6. Select the following OAuth scopes:

    • Manage user data via APIs (api)
    • Perform requests at any time (refresh_token, offline_access)

  7. Uncheck Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows if it is not required.

  8. Check Enable Client Credentials Flow.

  9. Click OK in the popup window.

  10. Scroll down and click Save.

  11. When the message appears informing that the changes may take some time to be applied, click Continue to open the new connected app page.

  12. Click Manage Consumer Details.

  13. Check your email to get the code required to verify your identity.

  14. Copy and save the Consumer Key and Consumer Secret. These credentials should be used as client_id and client_secret in authorization API requests to obtain an access token.

  15. Click Back to Manage Connected Apps.

  16. Click Manage → Edit Policies.

  17. Under Client Credentials Flow, in Run As, click the magnifying glass icon.

  18. In the popup window, select the preferred running user using the list of users or the search bar.

    note

    This user is considered the running user of the connected app. The API respects the permissions of the specified Cloudaware user while processing requests.

  19. After the popup window closes, return to the Edit Policies page.

  20. Scroll down and click Save.