Type of authorization to use in an SSO integration with Salesforce

[Julio29]

My client currently has the Salesforce connector and connects via SSO in Genesys. They want to consume the API:
(PATCH) https://api.sae1.pure.cloud/api/v2/conversations/calls/3b160736-77df-454c-850a-a83cdad74a9d/participants/bddb0098-5c99-48ec-b095-b5377bbce1fd
{
"state": "terminated",
"wrapup": {
"code": "c2f876bc-bfac-4d91-9f18-67f254e9e1a6"
}
}

To update the wrapupcode of a conversation from the Salesforce interface, this is because Salesforce wants to use wrapupcode at various levels. What type of authorization do you recommend I use? (Implicit, Authorization Code, SAML2). Since they initially used Client Credentials and it showed them the error that the API is not in a user context.

They want the user not to have to log in again.

Thanks for your answer.

[tim.smith]

The architecture of the application making the request will dictate which grant you use. Everything but client credentials has a user context. You can find more info and suggested use cases for each here: https://developer.genesys.cloud/authorization/platform-auth/#authorization-types.

[Julio29]

Thanks for your response.