Authentication

The API uses OAuth 2 with the client credentials flow. Send the access token as a bearer token on every request.

Token URLhttps://auth.nineid.cloud/auth/app-oauth

Grant typeclient_credentials

Token lifetime2 hours (expires_in: 7200)

Base URLhttps://TENANT.nineid.cloud/api/external/v2

curl -X POST https://auth.nineid.cloud/auth/app-oauth \
  -d grant_type=client_credentials \
  -d client_id=YOUR_CLIENT_ID \
  -d client_secret=YOUR_CLIENT_SECRET

# send it on every request
Authorization: Bearer ACCESS_TOKEN

The token endpoint answers 400 for a missing field or another grant type, and 401 for wrong credentials.

Want to see it on your own site?

Tell us what the gate has to do. We show you the matching flow.

Book a demo