Adding an authorized app

  1. In Infor OS Portal, select the API Gateway application from the App Menu.
  2. Select Authorized Apps.
  3. Click Add New App (plus sign).
  4. Specify this information:
    Name
    Specify a name for the authorized app, such as Infor WFM Clocks.
    Type
    Select Backend Service.
    Description
    Enter a description of the app.
    Use Bridge Authentication
    Disable this option.
    Enforce Scopes
    Enable this option.
    Note: If the Enforce Scopes option is not shown you must first configure it by selecting Configuration > OAuth 2.0 in the API Gateway menu.
    Scopes
    Select Infor-WFM-WFMCLOCKSPUBLICAPI.

    This field becomes available when you select the Enforce Scopes option.

    Client ID
    Read-only field. The client ID is generated when you save the app.
    Secret
    Read-only field. The client secret is generated when you save the app.
    OAuth 2.0 Access Token
    Use the default value.
    Issue Refresh Tokens
    Enable this option.

    If refresh tokens are not enabled when you download the credentials, the clock connection fails after two hours and displays this error:

    The refreshToken cannot be null or empty.

    If refresh tokens were not enabled when you first downloaded the credentials, enable the Issue Refresh Tokens option in the existing authorized app, save the change, and then reboot the clock for the update to take effect.

    Refresh Token Grant Lifetime
    Use the default value.
  5. Click the Save icon at the top of the page.
    Note: You must save the scope before downloading the credentials. If the scope is not saved first, the clock connection will fail at the ION API gateway with this error:

    OAuth2 scopes access control violated: Forbidden. Authorized app [app_name] does not have access to requested API resource.

    When you save your app a client ID and secret are generated and additional options are shown.