Client credentials

Use client credentials for server-to-server communication that does not require user interaction. The client typically authenticates with the token endpoint by using its client ID and client secret. A client secret is a unique key generated for each client. It provides time-limited access to assets, resources, and services. Because secrets allow access to data, keep them secure.

We recommend the following best practices with a client-credentials client:

• Create a separate client credential for each device or application instance that connects to CONNECT. This lets you manage secrets independently and identify which applications are connecting to CONNECT.

• Store client secrets securely wherever they are used.

• Use expiring secrets and rotate them on a schedule. When you switch to a new secret, create the new secret, update the application to use it, and delete the old secret only after it is no longer in use.