"Grant --Authorization Code" About authentication method

Hi team,

If you refer to the "Authenticate with Genesys Cloud" item at the URL below, it looks like the "PURE CLOUD" screen is displayed on the user screen during authentication.

https://developer.genesys.cloud/authorization/platform-auth/use-authorization-code#authenticate-with-genesys-cloud

I don't want the "PURE CLOUD" screen to appear on the user's screen during authentication.
I want to authenticate without displaying the "PURECLOUD" screen. Is there any way?

Regards.

Supplement: The following items are referenced.

https://developer.genesys.cloud/authorization/platform-auth/use-authorization-code#authenticate-with-genesys-cloud

Authenticate with Genesys Cloud
The user will provide their credentials to Genesys Cloud via one of the supported methods. More information on logging in: Log in, Log in using SSO

If you use the SAML2 Bearer grant, your 3rd party SSO provider may be able to complete the authorization flow without prompting the user. But that's a function of your 3rd party SSO provider and is not something Genesys has control over. If you use the implicit, auth code, or PKCE grants, you must use that login screen; any attempt to bypass it constitutes a misuse of the platform.

If you're working on a headless non-user app you may use client credentials, which does not use the login UI in the flow. Note that this is a non-user grant type so there are API endpoints that cannot be used by client credentials (like manipulating conversations, for example).

Hi team,

Thank you for your reply.

Let me ask you two questions.

  1. Does the following refer to "Client Credentials Grant"?

If you're working on a headless non-user app you may use client credentials, which does not use the login UI in the flow.
Note that this is a non-user grant type so there are API endpoints that cannot be used by client credentials
(like manipulating conversations, for example).

  1. I want to achieve Genesys authentication in Java without using SSO.
    Is there a way to keep the information (email address, password) on the screen below inside the Java program and implement it in the form that the authentication process is completed in the Java program?

The intent of the question is that I want to authenticate without the user having to operate the Genesys screen.

Regards.

That's mishandling of user credentials and is grounds for suspension of your org. The user that owns the user account is the only entity that is allowed to handle that user account's credentials. Giving user credentials to a local application entirely defeats the purpose of OAuth and presents a major security risk.

Hi tim.smith,

Thank you for your reply.

I'm considering whether there is a way to authenticate with a Java program in a way that does not use SSO and does not put the Genesys authorization screen out to the user.

Is there any other information I can refer to about java authentication methods other than the following URL?
https://developer.genesys.cloud/authorization/platform-auth/use-authorization-code#authenticate-with-genesys-cloud

Regards.

There isn't a way to do that. You must either have the user enter their Genesys Cloud credentials into our login screen or you must implement SSO for a 3rd party to verify the user's identity. There is no solution to authorize a user that does not involve an identity provider validating their identity.

All of the documentation regarding authorization can be found here: https://developer.genesys.cloud/authorization/platform-auth/

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.