CREA Identity Server
CREA's OAuth 2.0 / OpenID Connect authorization server at identity.crea.ca, which issues the access tokens every DDF® Web API call requires. Its discovery document is served anonymously and advertises the client_credentials, authorization_code, refresh_token, implicit, device_code and CIBA grants, and four scopes — openid, DDFApi_Read, OfferManagementApi.read.write and BoardDataApi.read. The documented DDF® flow is client_credentials with scope DDFApi_Read, where client_id and client_secret are the username and password of a registered DDF® Destination data feed. Tokens are valid for 60 minutes.