Genentech · Authentication Profile

Genentech Authentication

Authentication

Genentech secures its APIs with oauth2, openIdConnect, and apiKey across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and implicit flow(s).

CompanyBiotechnologyPharmaceuticalsHealthcareLife SciencesFHIRPatient Support ServicesDrug DiscoveryGenomics

Methods: oauth2, openIdConnect, apiKey Schemes: 3 OAuth flows: authorizationCode, implicit API key in: header

Security Schemes

openIdConnect openIdConnect

oauth2 oauth2

· flows: authorizationCode

apiKey apiKey

· in: header ()

Source

Authentication Profile

generated: '2026-07-19'
method: searched
source: https://developer.gene.com/.well-known/openid-configuration
docs: https://developer.gene.com/s/api-library
summary:
  types: [oauth2, openIdConnect, apiKey]
  api_key_in: [header]
  oauth2_flows: [authorizationCode, implicit]
  notes: >-
    The Genentech Developer Portal / Integration Marketplace is fronted by a
    Salesforce Experience Cloud identity provider exposing a full OpenID
    Connect discovery document. FHIR UAPI connectivity is registration-based:
    the Implementation Guide instructs partners to register through the
    Integration Marketplace and provision API keys per organization, on top of
    the OAuth2/OIDC authorization surface below.
schemes:
- name: openIdConnect
  type: openIdConnect
  openIdConnectUrl: https://developer.gene.com/.well-known/openid-configuration
  issuer: https://developer.gene.com
  sources: [well-known/genentech-openid-configuration.json]
- name: oauth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://developer.gene.com/services/oauth2/authorize
    tokenUrl: https://developer.gene.com/services/oauth2/token
  endpoints:
    userinfo: https://developer.gene.com/services/oauth2/userinfo
    revocation: https://developer.gene.com/services/oauth2/revoke
    introspection: https://developer.gene.com/services/oauth2/introspect
    registration: https://developer.gene.com/services/oauth2/register
    end_session: https://developer.gene.com/services/auth/idp/oidc/logout
    jwks_uri: https://developer.gene.com/id/keys
  token_endpoint_auth_methods: [client_secret_post, client_secret_basic, private_key_jwt]
  id_token_signing_alg: [RS256]
  sources: [well-known/genentech-openid-configuration.json]
- name: apiKey
  type: apiKey
  in: header
  description: >-
    Per-organization API keys provisioned via the Genentech Integration
    Marketplace, per the Universal API Implementation Guide.
  sources: [https://fhir.developer.gene.com/]