CAA Insurance · OAuth Scopes

CAA Insurance OAuth Scopes

OAuth 2.0 searched

CAA Insurance publishes 4 OAuth 2.0 scopes via the authorizationCode and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the CAA Insurance API on a user’s behalf.

Tokens are issued from https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

InsuranceCanadaProperty and CasualtyAuto InsuranceHome InsuranceCarrierBrokerPersonal LinesTelematicsPartner GatedNo Public API

Scopes: 4 Flows: authorizationCode, deviceCode Method: searched

OAuth endpoints

Authorization URL
https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/authorize

Token URL
https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token

Flows
authorizationCodedeviceCode

Scopes (4)

Scope	Description	Flows
openid	Sign the user in and issue an ID token.	authorizationCode, deviceCode
profile	Basic profile claims (name, preferred_username).	authorizationCode, deviceCode
email	The user's email claim.	authorizationCode, deviceCode
offline_access	Issue a refresh token so the session can be renewed without re-prompting.	authorizationCode, deviceCode

📄 Provider scope reference: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/v2.0/.well-known/openid-configuration

Source

OAuth Scopes

generated: '2026-07-25'
method: searched
source: well-known/caa-insurance-openid-configuration.json
docs: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/v2.0/.well-known/openid-configuration
note: >-
  CAA Insurance exposes no API and therefore no API authorization scopes. The
  only scope surface observable anywhere in the estate is the standard OpenID
  Connect scope set advertised by the Microsoft Entra External ID (CIAM) tenant
  that authenticates the CAA Broker Portal and CAA Club Group sign-in. These are
  identity scopes for signing a human in, not delegated permissions over
  insurance data — no quote, policy, billing, or claims scope exists publicly.
surface: identity-provider
schemes:
- name: EntraExternalIdCIAM
  type: openIdConnect
  source: well-known/caa-insurance-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/authorize
    tokenUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/devicecode
    tokenUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token
scopes:
- scope: openid
  description: Sign the user in and issue an ID token.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: profile
  description: Basic profile claims (name, preferred_username).
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: email
  description: The user's email claim.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: offline_access
  description: Issue a refresh token so the session can be renewed without re-prompting.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
business_scopes:
  published: false
  note: No quote, bind, policy, billing, or claims scope is published by CAA Insurance.