Service account
A service account is technical account that can be used to automate interactions with the Cloud-IAM API: monitoring, managing your extensions, automated data export, etc
Despite you could use nominative accounts to do so, we encourage you to use them because they survive to membership reorganization.
Create a service account
Go to your organization page and click on + New service account
:
Select the role this service account will have and click on New service account
:
Copy the Client Id and the Client Secret:
Copy the Client Secret
Remember to copy this Client Secret, as it will no longer be possible to display it afterwards.
Get token from service account
We provide a curl command to use your service account with our api:
curl https://iam.cloud-iam.com/auth/realms/cloud-iam/protocol/openid-connect/token \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=client_credentials" \
-d "client_id=sa_[...]" \
-d "client_secret=[...]"
curl https://iam.cloud-iam.com/auth/realms/cloud-iam/protocol/openid-connect/token \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=client_credentials" \
-d "client_id=sa_[...]" \
-d "client_secret=[...]"
Next, click on Back to organization
.
Delete a service account
Go to your organization page and click on delete icon:
Quota of service account by organization
Service accounts have a quota of 4
per organization:
If you need more service accounts, please contact us at support@cloud-iam.com.