Emply People's API2 and creating Shared Access Tokens. This is an alternative and more secure way to use API keys, which the administrators in your organization can share limited access to APIs with 3rd parties.
What is a Shared Access Token?
In the Emply People system only administrators have access to create Shared Access Tokens, which consists of:
-
A unique name
-
API permissions
-
IP address restrictions
-
Access token expiration time span (for example 3 months), enforced maximum of 1 year
-
A key to refresh/create a new access token via API
The administrator can generate access tokens which can be shared with 3rd parties for accessing APIs. The access tokens should have an expiration time, and it will be possible for you to automate the process of refreshing the tokens.
How to create a Shared Access Token in Emply People
-
Go to ++
-
Click on
-
Add title to the token and select expiration date from the drop down. At the moment it is only possible to select 365 days for expiration date.
-
Next choose the access for the token.
-
Access gives you an overview of the product areas, which can be expanded to define more specific API access forms or folders in the specified product area:
-
Mark access:
-
Read access (GET): Allows the API key GET data from the selected area.
-
Write access (PUT / POST): Allows the API key to PUT/POST, in other words create/update, the data in the selected area.
-
Delete access: Allows the API key to delete data in the selected area.
-
-
Click the pencil icon to edit and more information will appear.
-
Fill out Label(identifier), IP Address from, and IP Address to. These settings are optional and allows you to restrict the IP addresses which can use the Shared Access Token.
-
Once title, expiration date, and API access have been chosen finish by clicking .
-
The Shared Access Token will generate and you should copy the token immediately since it will not be stored and shown again.
Note
Make sure to copy the token immediately, as it will not be stored and you will not be able to see it again.
The Shared Access Token will appear in the overview under API2.