Creating and Revoking API Client Credentials
About this task
Before external applications can access the SOTI XSight API, you must first generate a client ID and client secret. External application use the client ID and secret to authenticate themselves to the SOTI XSight API.
To create SOTI XSight API client credentials:
Procedure
- Log in to the SOTI XSight web console as administrator.
- In the top-left corner of the console, select Main Menu and then select Settings . The Settings menu opens.
- In the Settings menu, select Integration and then select API Clients. The API Clients view opens.
- In the API Clients view, select Add API Clients . The Add API Client panel opens.
- In the Add API Client panel, enter a name and the redirect URL of the API client.
- Select Generate Credentials. The generated client ID and secret appear in the Add API Client panel.
- Optional: Select Copy ID to copy the client ID to the clipboard. You can also copy the client ID from the Integration section later.
-
Select Copy Secret
to copy the client secret to the clipboard. Save the client secret in a
secure file.
Warning: This is the only opportunity to see and copy the client secret. Once you close the Add API Client panel, you cannot retrieve it.
- Select OK to close the Add API Client panel. The new API client gets added to the list of clients in the API Clients view.
Results
You have generated the client ID and secret.
What to do next
Revoking API Client Credentials
About this task
To revoke SOTI XSight API client credentials:
Procedure
- Log into SOTI XSight as an administrator.
- On the menu bar, select the menu button and select Settings. The Settings view opens.
- On the left side of the settings view, select Integration.
- Select on API Clients. The API Clients section opens on the right side.
- Select an API client name from the list then select to the right of your selection. The Delete API Client dialog box opens.
- In the Delete API Client dialog box, select Yes, please delete this API client, then select Delete. This removes the API client credentials from the list.