Authentication

To authenticate your calls to Tandem Data REST endpoints, use the standard APS Authentication service: Authentication

Tandem Data supports both 3-legged and 2-legged OAuth scenarios. In the case of 3-legged authorization, the user will be asked to enter their login credentials, and all API calls are made in the context of that user. In addition, you can use 2-legged authorization to connect a Service to Tandem. This requires you to grant access for that service using the Tandem product.

To authorize that service for a single Facility, click on the User tab on the left panel and add the service Client_ID.

To authorize that service for all Facilities owned by an account, use the Manage page of Tandem, click on the Team tab and select Add Member.

NOTE: the permission granted to the service or user takes precedence over the scope requested by the API. For instance, your app may request data:write scope but if the application or user is only granted read permission by Tandem, you will not be able to modify data.