Elephas Biosciences OAuth Scopes

OAuth 2.0 probed

Elephas Biosciences publishes 2 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Elephas Biosciences API on a user’s behalf.

Tokens are issued from https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareLife SciencesBiotechnologyPrecision OncologyDiagnosticsImmunotherapyClinical ResearchLaboratoryMedical Devices

Scopes: 2 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/authorize

Token URL
https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token

Flows
authorizationCode

Scopes (2)

Scope	Description	Flows
openid	Standard OpenID Connect scope; the only value advertised in scopes_supported by the B2C discovery document.	authorizationCode
https://elephasus.onmicrosoft.com/prod/api/User.Read	Resource scope the Elephas Portal requests for the production backend API. The application id URI (elephasus.onmicrosoft.com/prod/api) names the Elephas Portal API resource; User.Read is the delegated permission the browser client asks for on the signed-in user's behalf.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-12'
method: probed
source: 'https://portal.elephas.com/assets/config/config.json (Scope value requested
  by the Elephas Portal SPA) + well-known/elephas-biosciences-openid-configuration.json'
docs: null
docs_note: Elephas publishes no scopes or permissions reference. Both scopes below
  were observed, not documented.
schemes:
- name: AzureAdB2C
  type: openIdConnect
  source: well-known/elephas-biosciences-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/authorize
    tokenUrl: https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token
scopes:
- scope: openid
  description: Standard OpenID Connect scope; the only value advertised in
    scopes_supported by the B2C discovery document.
  flows: [authorizationCode]
  sources: [well-known/elephas-biosciences-openid-configuration.json]
- scope: https://elephasus.onmicrosoft.com/prod/api/User.Read
  description: 'Resource scope the Elephas Portal requests for the production
    backend API. The application id URI (elephasus.onmicrosoft.com/prod/api) names
    the Elephas Portal API resource; User.Read is the delegated permission the
    browser client asks for on the signed-in user''s behalf.'
  resource: elephasus.onmicrosoft.com/prod/api
  flows: [authorizationCode]
  sources: [https://portal.elephas.com/assets/config/config.json]
scope_count: 2
coverage_note: 'This is the complete OBSERVABLE scope surface, not necessarily the
  complete one. Azure AD B2C does not advertise resource scopes in discovery, so any
  additional delegated or application permissions the API defines are only visible
  to an authenticated tenant administrator. A single User.Read-style delegated scope
  fronting an entire clinical reporting API suggests authorization is enforced
  server-side by role rather than by OAuth scope.'