Skip to main content

Authentication

How it works​

This service is secured via OpenID Connect. To access it, a valid Bearer Token is required. In order to receive a Bearer Token, you must have an authorized client in our system.

Signing up​

If you are interested in this service, contact salesservices@bdk-bank.de to receive your client credentials.

Accessing the service​

A client comes with an id and secret, which are required in order to receive a Bearer Token. To receive a Bearer Token, send a HTTP POST request to our token endpoint as shown in the example below.

This can be done with a tool of your choice. In the example below, cURL was used from the command line:

curl -d grant_type=client_credentials -d client_id=<id> -d client_secret=<secret> <AUTHENTICATION_URL>

Possible values for <AUTHENTICATION_URL>:

  • Test Stage: https://sso-test.bdk-bank.io/auth/realms/mip-app-test/protocol/openid-connect/token
  • Production Stage: https://sso.bdk-bank.io/auth/realms/mip-app/protocol/openid-connect/token

The resulting Token in field access_token can now be used to authorize when accessing an endpoint of this service by adding an Authorization-Header to your request that contains Bearer <access_token> as value.

Note that client side integration of this service is not supported and CORS requests are not possible.