Lightforce · Authentication Profile

Lightforce Authentication

Authentication

Lightforce secures its APIs with openIdConnect and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, implicit, clientCredentials, deviceCode, password, refreshToken, and tokenExchange flow(s).

CompanyHealthtechOrthodonticsDentistryMedical Devices3D PrintingDigital ManufacturingIdentity
Methods: openIdConnect, oauth2 Schemes: 2 OAuth flows: authorizationCode, implicit, clientCredentials, deviceCode, password, refreshToken, tokenExchange API key in:

Security Schemes

OpenIDConnect openIdConnect
OAuth2 oauth2
· flows: authorizationCode, implicit, clientCredentials, deviceCode

Source

Authentication Profile

lightforce-authentication.yml Raw ↑ 
generated: '2026-07-19'
method: searched
source: https://id.lightforceortho.com/.well-known/openid-configuration
docs: https://id.lightforceortho.com/.well-known/openid-configuration
notes: >-
  Derived verbatim from the live OpenID Connect discovery document served by the
  LightForce identity host. There is no public OpenAPI to derive securitySchemes from,
  so the auth profile is taken directly from OIDC discovery. Client registration is
  gated in practice: LightForce does not publish a developer program, and the
  authorization surface exists to authenticate orthodontic practice users into the
  LightForce Doctor Portal.
summary:
  types:
  - openIdConnect
  - oauth2
  api_key_in: []
  oauth2_flows:
  - authorizationCode
  - implicit
  - clientCredentials
  - deviceCode
  - password
  - refreshToken
  - tokenExchange
  pkce: true
  pkce_methods:
  - S256
  - plain
  mfa: true
  dpop: true
schemes:
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://id.lightforceortho.com/.well-known/openid-configuration
  issuer: https://id.lightforceortho.com/
  sources:
  - well-known/lightforce-openid-configuration.json
- name: OAuth2
  type: oauth2
  sources:
  - well-known/lightforce-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://id.lightforceortho.com/authorize
    tokenUrl: https://id.lightforceortho.com/oauth/token
  - flow: implicit
    authorizationUrl: https://id.lightforceortho.com/authorize
  - flow: clientCredentials
    tokenUrl: https://id.lightforceortho.com/oauth/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://id.lightforceortho.com/oauth/device/code
    tokenUrl: https://id.lightforceortho.com/oauth/token
endpoints:
  authorization: https://id.lightforceortho.com/authorize
  token: https://id.lightforceortho.com/oauth/token
  userinfo: https://id.lightforceortho.com/userinfo
  device_authorization: https://id.lightforceortho.com/oauth/device/code
  backchannel_authentication: https://id.lightforceortho.com/bc-authorize
  mfa_challenge: https://id.lightforceortho.com/mfa/challenge
  revocation: https://id.lightforceortho.com/oauth/revoke
  global_token_revocation: https://id.lightforceortho.com/oauth/global-token-revocation/connection/{connectionName}
  registration: https://id.lightforceortho.com/oidc/register
  jwks: https://id.lightforceortho.com/.well-known/jwks.json
grant_types_supported:
- client_credentials
- authorization_code
- refresh_token
- password
- implicit
- urn:ietf:params:oauth:grant-type:device_code
- urn:ietf:params:oauth:grant-type:token-exchange
- http://auth0.com/oauth/grant-type/password-realm
- http://auth0.com/oauth/grant-type/passwordless/otp
- http://auth0.com/oauth/grant-type/mfa-oob
- http://auth0.com/oauth/grant-type/mfa-otp
- http://auth0.com/oauth/grant-type/mfa-recovery-code
token_endpoint_auth_methods_supported:
- client_secret_basic
- client_secret_post
- private_key_jwt
- none
id_token_signing_alg_values_supported:
- HS256
- RS256
- PS256
dpop_signing_alg_values_supported:
- ES256
backchannel_logout_supported: true