Lineage · Authentication Profile

Lineage Authentication

Authentication

Lineage secures its APIs with openIdConnect and oauth2 across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, clientCredentials, deviceCode, and refreshToken flow(s).

CompanyLogisticsCold ChainWarehousingSupply ChainTemperature ControlledFreightTransportationFood and BeverageREIT
Methods: openIdConnect, oauth2 Schemes: 2 OAuth flows: authorizationCode, clientCredentials, deviceCode, refreshToken API key in:

Security Schemes

LineageLinkCIAM openIdConnect
LineageLinkHelpCommunity openIdConnect

Source

Authentication Profile

lineage-authentication.yml Raw ↑ 
generated: '2026-07-19'
method: searched
source: >-
  OIDC discovery documents fetched from lineage-ciam.us.auth0.com and
  lineagelinkhelp.onelineage.com on 2026-07-19
scope_of_this_profile: >-
  Lineage publishes no public API and no developer portal, so there is no
  documented API authentication contract. What is documented below is the
  customer-facing IDENTITY surface behind the Lineage Link platform and its help
  community — real, verified OpenID Connect endpoints, but end-user portal SSO
  rather than a programmatic API auth scheme. Do not read this as evidence of a
  public API.
summary:
  types:
  - openIdConnect
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
  - deviceCode
  - refreshToken
  api_key_in: []
  public_api_documented: false
schemes:
- name: LineageLinkCIAM
  type: openIdConnect
  provider: Auth0
  purpose: Customer identity (CIAM) for the Lineage Link supply chain platform
  custom_domain: https://ciam.lineageapps.com
  issuer: https://lineage-ciam.us.auth0.com/
  openIdConnectUrl: https://lineage-ciam.us.auth0.com/.well-known/openid-configuration
  authorization_endpoint: https://lineage-ciam.us.auth0.com/authorize
  token_endpoint: https://lineage-ciam.us.auth0.com/oauth/token
  userinfo_endpoint: https://lineage-ciam.us.auth0.com/userinfo
  jwks_uri: https://lineage-ciam.us.auth0.com/.well-known/jwks.json
  revocation_endpoint: https://lineage-ciam.us.auth0.com/oauth/revoke
  device_authorization_endpoint: https://lineage-ciam.us.auth0.com/oauth/device/code
  registration_endpoint: https://lineage-ciam.us.auth0.com/oidc/register
  pkce: true
  code_challenge_methods:
  - S256
  - plain
  token_endpoint_auth_methods:
  - client_secret_basic
  - client_secret_post
  - private_key_jwt
  - none
  sources:
  - well-known/lineage-ciam-openid-configuration.json
- name: LineageLinkHelpCommunity
  type: openIdConnect
  provider: Salesforce Experience Cloud
  purpose: Identity for the Lineage Link Help support community
  issuer: https://lineagelinkhelp.onelineage.com/support
  openIdConnectUrl: https://lineagelinkhelp.onelineage.com/.well-known/openid-configuration
  authorization_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/authorize
  token_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/token
  userinfo_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/userinfo
  jwks_uri: https://lineagelinkhelp.onelineage.com/support/id/keys
  revocation_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/revoke
  introspection_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/introspect
  registration_endpoint: https://lineagelinkhelp.onelineage.com/support/services/oauth2/register
  id_token_signing_alg:
  - RS256
  token_endpoint_auth_methods:
  - client_secret_post
  - client_secret_basic
  - private_key_jwt
  sources:
  - well-known/lineage-linkhelp-openid-configuration.json
customer_login: https://www.onelineage.com/customer-login
related:
- scopes/lineage-scopes.yml
- well-known/lineage-well-known.yml