Client-Credential-Flow with IDP

To integrate a Custom Identity Provider (IDP) to the fulfillmenttools platform, the OAuth 2.0 definition of a Client-Credential-Flow can be used. In this case, the platform automatically creates an internal OIDC (OpenID Connect) service user based on the information contained in the access token.

The created OIDC service user is not visible through the API user endpoints or in the fulfillmenttools Backoffice, as these only list human users.

To enable the Client-Credential-Flow, configure an application with an IDP. The appid provided in the access token serves as the unique identifier within the fulfillmenttools platform. OIDC service users can be assigned any roles available to human users.