QuestionQ2

Configure all aspects of Adobe Commerce Cloud

A third-party company needs to build an application that integrates with the Adobe Commerce system to retrieve order data for reporting. The integration requires access to the GET /V1/orders endpoint. It will invoke this endpoint automatically every hour, around the clock. The merchant wants to be able to restrict or expand access to resources and revoke that access through the Admin Panel.

Which authentication type available in Adobe Commerce should be used and implemented in the third-party system for this integration?

  • A Use token-based authentication to obtain the Admin Token. The third-party system will utilize the REST endpoint using the admin username and password to get the Admin Token, which will be used as the Bearer Token to authorize.
  • B Use token-based authentication to obtain an Integration Token. Integration will be created and activated in the admin panel using default integration token settings to get access to the token, which will be used as the Bearer Token to authorize.
  • C Use OAuth-based authentication to provide access to system resources. Integration will be registered by the merchant in the admin panel with an OAuth handshake during activation. The third-party system should follow OAuth protocol to authorize.
Explanation

Adobe Commerce uses OAuth 1.0a integrations for third-party applications. An integration is created and authorized in Admin, where the merchant can grant all or a custom subset of API resources, change authorization, or revoke the integration. OAuth requests use the integration’s OAuth credentials and signed Authorization header rather than treating an integration token as a standalone Bearer token. Adobe Commerce OAuth-based authentication

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!