Employee Navigator

Employee Navigator Identity (OpenID Connect)

The Employee Navigator OpenID Connect / OAuth 2.0 authorization server that fronts every Employee Navigator API service. Its discovery document is served anonymously and advertises authorization code, client credentials, refresh token, implicit, device code and CIBA grants, PKCE (S256), DPoP, token introspection, token revocation, and front-channel plus back-channel logout, along with a named scope for each platform API service.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/employeenavigator/refs/heads/main/authentication/employeenavigator-authentication.yml

Other Resources

🔗
OpenIDConnect
https://www.employeenavigator.com/identity/.well-known/openid-configuration
🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/employeenavigator/refs/heads/main/scopes/employeenavigator-scopes.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/employeenavigator/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
name: Employee Navigator Identity (OpenID Connect)
description: The Employee Navigator OpenID Connect / OAuth 2.0 authorization server that fronts every
  Employee Navigator API service. Its discovery document is served anonymously and advertises authorization
  code, client credentials, refresh token, implicit, device code and CIBA grants, PKCE (S256), DPoP, token
  introspection, token revocation, and front-channel plus back-channel logout, along with a named scope
  for each platform API service.
humanURL: https://www.employeenavigator.com/security/
baseURL: https://www.employeenavigator.com/identity
tags:
- OpenID Connect
- OAuth 2.0
- Identity
- Authentication
properties:
- type: OpenIDConnect
  url: https://www.employeenavigator.com/identity/.well-known/openid-configuration
- type: Authentication
  url: authentication/employeenavigator-authentication.yml
- type: OAuthScopes
  url: scopes/employeenavigator-scopes.yml