Resilience · OAuth Scopes

Resilience OAuth Scopes

OAuth 2.0 searched

Resilience publishes 14 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Resilience API on a user’s behalf.

Tokens are issued from https://auth.cyberresilience.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

InsuranceUnited StatesCyber InsuranceProperty and CasualtyInsurtechUnderwritingClaimsRisk DataTechnology Errors and OmissionsBrokerSpecialty Insurance

Scopes: 14 Flows: authorizationCode, clientCredentials Method: searched

OAuth endpoints

Authorization URL
https://auth.cyberresilience.com/authorize

Token URL
https://auth.cyberresilience.com/oauth/token

Flows
authorizationCodeclientCredentials

Scopes (14)

Scope	Description	Flows
openid	Issue an ID token — required for OpenID Connect authentication.
profile	Access the end user's default profile claims.
email	Access the end user's email address.
email_verified	Access the end user's email verification status.
offline_access	Issue a refresh token so the portal session can be renewed.
name	Access the end user's full name claim.
given_name	Access the end user's given-name claim.
family_name	Access the end user's family-name claim.
nickname	Access the end user's nickname claim.
picture	Access the end user's profile picture claim.
created_at	Access the end user's account creation timestamp.
identities	Access the end user's linked identity providers.
phone	Access the end user's phone number claim.
address	Access the end user's address claim.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-25'
method: searched
source: https://auth.cyberresilience.com/.well-known/openid-configuration
local_copy: well-known/resilience-cyber-openid-configuration.json
note: >-
  These are the scopes the Auth0 tenant advertises in its discovery document and
  the scopes the portal actually requests on /authorize. They are OpenID Connect
  standard scopes and Auth0 profile-claim scopes — NOT product scopes. No
  insurance-domain scope surface (policy, quote, bind, claim, submission,
  portfolio) is published anywhere on the Resilience estate, and there is no
  scopes/permissions reference page to search: cyberresilience.com soft-404s
  every developer path. Absence of a domain scope model is the finding, not a
  gap in this harvest.
schemes:
- name: Auth0OIDC
  source: well-known/resilience-cyber-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://auth.cyberresilience.com/authorize
    tokenUrl: https://auth.cyberresilience.com/oauth/token
  - flow: clientCredentials
    tokenUrl: https://auth.cyberresilience.com/oauth/token
requested_by_portal:
- openid
- profile
- email
- offline_access
scopes:
- scope: openid
  description: Issue an ID token — required for OpenID Connect authentication.
  kind: oidc-standard
  requested_by_portal: true
- scope: profile
  description: Access the end user's default profile claims.
  kind: oidc-standard
  requested_by_portal: true
- scope: email
  description: Access the end user's email address.
  kind: oidc-standard
  requested_by_portal: true
- scope: email_verified
  description: Access the end user's email verification status.
  kind: auth0-claim
- scope: offline_access
  description: Issue a refresh token so the portal session can be renewed.
  kind: oidc-standard
  requested_by_portal: true
- scope: name
  description: Access the end user's full name claim.
  kind: auth0-claim
- scope: given_name
  description: Access the end user's given-name claim.
  kind: auth0-claim
- scope: family_name
  description: Access the end user's family-name claim.
  kind: auth0-claim
- scope: nickname
  description: Access the end user's nickname claim.
  kind: auth0-claim
- scope: picture
  description: Access the end user's profile picture claim.
  kind: auth0-claim
- scope: created_at
  description: Access the end user's account creation timestamp.
  kind: auth0-claim
- scope: identities
  description: Access the end user's linked identity providers.
  kind: auth0-claim
- scope: phone
  description: Access the end user's phone number claim.
  kind: oidc-standard
- scope: address
  description: Access the end user's address claim.
  kind: oidc-standard
product_scopes:
  published: false
  audience: https://api.prod.resilienceinsurance.app
  note: >-
    Any product-level scopes on the private audience would only be visible to an
    authenticated broker or policyholder client. They cannot be enumerated
    anonymously and are not documented publicly.