About Secure Service Account API
Secure Service Account APIs (SSA or SA) allow applications to securely authenticate using a service account instead of a user. These APIs ensure the security of digital assets, enable automation, and offer robust access controls through fine-grained permissions.
SSAs use a private key to generate a JWT, which is then exchanged for a 3-legged access token. This token can then be used to interact with other Autodesk Platform Services (APS) APIs securely.
SSA API enables:
- A simple and secure server-to-server mechanism to automate existing 3-legged access token workflows
- Creation and management of service accounts and RSA key pairs
- Exchange a secure JWT for a user-context 3-legged access token
Client ID and SSA API usage are the app’s unique identifiers used in the OAuth flow. All API activity performed by an SSA is linked to its associated Client ID. If multiple SSA accounts are created under a single Client ID, then all their API usage is aggregated and attributed to that Client ID.
Common Uses
With the Secure Service Account API, a secure interaction or data transfer through APIs is achieved between clients and servers connected over public networks.
- Enhanced Security: By creating service accounts bound to specific applications, SSAs reduce the risk of unauthorized access and overexposure of project data.
- Refined Access Control: SSAs offer fine-grained control over access permissions, ensuring that applications only access the resources they need.
- Improved User Experience: Customers can confidently integrate third-party applications without compromising security, reducing the need to decline integrations or remove existing ones.
- Seamless Automation: SSAs enable applications to perform automated tasks without human interference, streamlining workflows and increasing efficiency.
- Third-Party Application Support: SSAs allow third-party applications to interact securely within the Autodesk ecosystem, facilitating more robust and secure integrations.
- Sign in: The Secure Service Account never needs to sign in, and can never “lose” their refresh token.
Next Steps
- Get started with the How-to guide.
- Explore Code Samples to discover how the Secure Service Account API is used in applications.
Terms of Service
Secure Service Account API is subject to Autodesk Platform Services Terms of Service.