Authentication using OAuth 2.0

To access Adobe Learning Manager APIs securely, you must authenticate using ALM’s OAuth 2.0 mechanism. This process includes registering your application, generating an authorization code, exchanging it for a refresh token, and finally using the refresh token to get an access token.

Register an application

Integrate Adobe Learning Manager with external applications for enhanced versatility. The steps involve accessing Integration Administrator interface, registering the application, and obtaining client ID and Secret. Generate authentication tokens (OAuth, Refresh, and Access Tokens) from ALM, emphasizing the use of the OAuth 2.0 framework for authentication and authorization. The access token has a validity of seven days.

  1. Sign in to Adobe Learning Manager as an integration administrator.

  2. Select Applications on the left pane.

    alt text

  3. Select Register and add the following information:

    • Application Name: Type the name of your application (max 50 characters).

    • URL: The official URL of your company or application. Used for identification and reference.

    • Redirect Domains: Specify the domains (for example, http://learningmanager.adobe.com) that ALM can redirect to after authorization. You can mention multiple URLs, but the URLs must be valid.

    • Description: Brief description of what the application does.

    • Scopes: Select one of the six available options to define the scope of your application. Based on your choice mentioned here, the Learning Manager API endpoints are accessible for your application. For example, if you chose Learner role read access, then all the Learning Manager learner API end points are read-only accessible to your application.

      • Admin role read/write access: Allows the application to access or modify data as an administrator.
      • Learner role read/write access: Allows the application to access or modify data for learners.
      • xAPI read/write access: Enables the application to access and send Experience API (xAPI) statements.
    • For this account only?

      • Yes - if you choose Yes, then the application is not visible to other account administrators.
      • No - if you choose No, other account admins can also access this application, but they need to use the application id to access this application. Application id is generated and displayed in Learning Manager application Edit mode.

      alt text

  4. Select Save to register the application.

    • After you register the application, the application is available in the list of applications created in the account. Select the application and you’ll see the following in addition to the previously entered fields:
    • Application ID: This is the Client ID. This ID tells ALM the application that is requesting access. It’s included in API requests to identify the app.
    • Application Secret: This is used to authenticate your app and verify its identity during token exchange steps (for example, when requesting a refresh token or an access token).