SmartPlant Foundation uses OAuth 2 as the authorization framework. The authorization service provides an OAuth token to a client when presented with a set of valid credentials. The generated OAuth token can be used to authorize subsequent client application requests to the SmartPlant Foundation Server API to consume any web APIs.
There are currently two implementations commonly used in the architecture:
-
Intergraph Authorization Server - provided as part of the SmartPlant Foundation installation and uses either SmartPlant Foundation credentials or Windows Authentication to generate a valid OAuth token for subsequent requests.
-
Smart API Manager (SAM) - provided independently of SmartPlant Foundation and provides more extensive Authorization Server capabilities and integration to other identity providers.