Get Started

🌟 Get started with IDENTOS Access Management with this simple example setup!

TODO: Create overview diagram with steps overlaid.

In our example setup, we'll configure the Authorization Server for the OAuth 2.0 client credentials authorization flow. This controls how Client applications request and use Access Tokens to access their own protected Resources from a Resource Server.

If you'd like to try this setup yourself, please note the following assumptions:

Each step involves making one or more API calls to the Authorization Server. For each API call, you'll need to replace the following placeholders with the right values according to your Authorization Server's configuration:

In this step-by-step setup procedure, we'll make API calls to the Authorization Server to configure an example Resource, Resouce Server, and Client. Then we'll request an Access Token that the Client application can use to access the Resource we made.

For our example, we'll pretend that we already have a Resource Server that stores a hospital's patient health records. The hospital has a web application that needs to read blood glucose levels from these records, and only that data.

To do this, we'll simply define each role, their scopes (read, write, etc.), and the relationships between them in the Authorization Server. We'll want to give the hospital's web application the permission to read the blood glucose levels stored in the hospital's Resource Server.