Equinor · Authentication Profile

Equinor Authentication

Authentication

Equinor secures its APIs with apiKey and oauth2 across 5 declared security schemes, as derived from its OpenAPI definitions.

CompanyEnergyOil and GasRenewablesNorwayOpen DataOpen Source

Methods: apiKey, oauth2 Schemes: 5 OAuth flows: API key in: header, query

Security Schemes

azureAdOAuth2 oauth2

· flows: ,

apiKeyHeader apiKey

· in: header (Ocp-Apim-Subscription-Key)

apiKeyQuery apiKey

· in: query (subscription-key)

apiKeyHeader apiKey

· in: header (sub)

apiKeyQuery apiKey

· in: query (sub)

Source

Authentication Profile

generated: '2026-10-09'
method: searched
source: https://github.com/equinor/OmniaPlant/wiki/Authentication-&-Authorization
docs: https://github.com/equinor/OmniaPlant/wiki/Authentication-&-Authorization
derived_from:
- openapi/equinor-alarm-events-openapi.yml
- openapi/equinor-bluebook-openapi.yml
- openapi/equinor-ims-export-subscriptions-openapi.yml
- openapi/equinor-ims-metadata-openapi.yml
- openapi/equinor-timeseries-openapi.yml
summary:
  types:
  - apiKey
  - oauth2
  api_key_in:
  - header
  - query
  identity_provider: Azure AD (Microsoft Entra ID)
schemes:
- name: azureAdOAuth2
  type: oauth2
  source: docs
  description: >-
    "The Omnia Timeseries API uses OAuth 2.0 and Azure AD as identity provider." Tested flows are Client Credentials Grant (service-to-service with shared secret) and Authorization Code (user impersonation, native/public client). Managed Service Identity is also supported for Equinor applications in Azure. Not declared as a securityScheme in the OpenAPI exports.
  flows:
  - clientCredentials
  - authorizationCode
  token_lifetime: >-
    access token "has an expiration time (e.g. 1 hour)"; the client must renew it.
  onboarding: Access is granted on request (OmniaIndIoT@equinor.com or ServiceNow request); roles/API permissions such as Timeseries.Read and AE.Read are assigned by the Omnia Ind IoT team.
- name: apiKeyHeader
  type: apiKey
  in: header
  parameter: Ocp-Apim-Subscription-Key
  sources: [openapi/equinor-alarm-events-openapi.yml, openapi/equinor-bluebook-openapi.yml, openapi/equinor-ims-metadata-openapi.yml]
- name: apiKeyQuery
  type: apiKey
  in: query
  parameter: subscription-key
  sources: [openapi/equinor-alarm-events-openapi.yml, openapi/equinor-bluebook-openapi.yml, openapi/equinor-ims-metadata-openapi.yml]
- name: apiKeyHeader
  type: apiKey
  in: header
  parameter: sub
  sources: [openapi/equinor-ims-export-subscriptions-openapi.yml, openapi/equinor-timeseries-openapi.yml]
- name: apiKeyQuery
  type: apiKey
  in: query
  parameter: sub
  sources: [openapi/equinor-ims-export-subscriptions-openapi.yml, openapi/equinor-timeseries-openapi.yml]
note: The apiKey schemes are the Azure API Management subscription-key schemes from the api.equinor.com portal exports; the StormGeo contract declares no securitySchemes.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/equinor-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.