Lightforce · Authentication Profile

Lightforce Authentication

Authentication

Lightforce secures its APIs with openIdConnect and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, implicit, clientCredentials, deviceCode, password, refreshToken, and tokenExchange flow(s).

CompanyHealthtechOrthodonticsDentistryMedical Devices3D PrintingDigital ManufacturingIdentity
Methods: openIdConnect, oauth2 Schemes: 2 OAuth flows: authorizationCode, implicit, clientCredentials, deviceCode, password, refreshToken, tokenExchange API key in:

Security Schemes

OpenIDConnect openIdConnect
OAuth2 oauth2
· flows: authorizationCode, implicit, clientCredentials, deviceCode

Source

Authentication Profile

lightforce-authentication.yml Raw ↑ 
generated: '2026-07-19'
method: searched
source: https://id.lightforceortho.com/.well-known/openid-configuration
docs: https://id.lightforceortho.com/.well-known/openid-configuration
notes: >-
  Derived verbatim from the live OpenID Connect discovery document served by the
  LightForce identity host. There is no public OpenAPI to derive securitySchemes from,
  so the auth profile is taken directly from OIDC discovery. Client registration is
  gated in practice: LightForce does not publish a developer program, and the
  authorization surface exists to authenticate orthodontic practice users into the
  LightForce Doctor Portal.
summary:
  types:
  - openIdConnect
  - oauth2
  api_key_in: []
  oauth2_flows:
  - authorizationCode
  - implicit
  - clientCredentials
  - deviceCode
  - password
  - refreshToken
  - tokenExchange
  pkce: true
  pkce_methods:
  - S256
  - plain
  mfa: true
  dpop: true
schemes:
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://id.lightforceortho.com/.well-known/openid-configuration
  issuer: https://id.lightforceortho.com/
  sources:
  - well-known/lightforce-openid-configuration.json
- name: OAuth2
  type: oauth2
  sources:
  - well-known/lightforce-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://id.lightforceortho.com/authorize
    tokenUrl: https://id.lightforceortho.com/oauth/token
  - flow: implicit
    authorizationUrl: https://id.lightforceortho.com/authorize
  - flow: clientCredentials
    tokenUrl: https://id.lightforceortho.com/oauth/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://id.lightforceortho.com/oauth/device/code
    tokenUrl: https://id.lightforceortho.com/oauth/token
endpoints:
  authorization: https://id.lightforceortho.com/authorize
  token: https://id.lightforceortho.com/oauth/token
  userinfo: https://id.lightforceortho.com/userinfo
  device_authorization: https://id.lightforceortho.com/oauth/device/code
  backchannel_authentication: https://id.lightforceortho.com/bc-authorize
  mfa_challenge: https://id.lightforceortho.com/mfa/challenge
  revocation: https://id.lightforceortho.com/oauth/revoke
  global_token_revocation: https://id.lightforceortho.com/oauth/global-token-revocation/connection/{connectionName}
  registration: https://id.lightforceortho.com/oidc/register
  jwks: https://id.lightforceortho.com/.well-known/jwks.json
grant_types_supported:
- client_credentials
- authorization_code
- refresh_token
- password
- implicit
- urn:ietf:params:oauth:grant-type:device_code
- urn:ietf:params:oauth:grant-type:token-exchange
- http://auth0.com/oauth/grant-type/password-realm
- http://auth0.com/oauth/grant-type/passwordless/otp
- http://auth0.com/oauth/grant-type/mfa-oob
- http://auth0.com/oauth/grant-type/mfa-otp
- http://auth0.com/oauth/grant-type/mfa-recovery-code
token_endpoint_auth_methods_supported:
- client_secret_basic
- client_secret_post
- private_key_jwt
- none
id_token_signing_alg_values_supported:
- HS256
- RS256
- PS256
dpop_signing_alg_values_supported:
- ES256
backchannel_logout_supported: true

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/lightforce-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.