Science Exchange · Authentication Profile

Scienceexchange Authentication

Authentication

Science Exchange secures its APIs with oauth2, openIdConnect, and apiKey across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyLife SciencesResearch and DevelopmentProcurementSupplier ManagementMarketplaceBiotechPharmaceuticalScientific Research
Methods: oauth2, openIdConnect, apiKey Schemes: 3 OAuth flows: authorizationCode API key in: query

Security Schemes

OpenIDConnect openIdConnect
scheme: oidc
EnterpriseSSO saml
ProvidersApiKey apiKey
· in: query (access_token)

Source

Authentication Profile

scienceexchange-authentication.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: >-
  https://app.scienceexchange.com/.well-known/openid-configuration +
  github.com/scienceexchange/se_providers_api_client (first-party gem source)
summary:
  types:
  - oauth2
  - openIdConnect
  - apiKey
  oauth2_flows:
  - authorizationCode
  api_key_in:
  - query
schemes:
- name: OpenIDConnect
  type: openIdConnect
  scheme: oidc
  surface: app.scienceexchange.com login (Salesforce Experience Cloud / Identity)
  issuer: https://app.scienceexchange.com
  authorization_endpoint: https://app.scienceexchange.com/services/oauth2/authorize
  token_endpoint: https://app.scienceexchange.com/services/oauth2/token
  userinfo_endpoint: https://app.scienceexchange.com/services/oauth2/userinfo
  introspection_endpoint: https://app.scienceexchange.com/services/oauth2/introspect
  jwks_uri: https://app.scienceexchange.com/id/keys
  id_token_signing_alg_values_supported:
  - RS256
  token_endpoint_auth_methods_supported:
  - client_secret_post
  - client_secret_basic
  - private_key_jwt
  sources:
  - well-known/scienceexchange-openid-configuration.json
- name: EnterpriseSSO
  type: saml
  surface: platform login for enterprise customers
  providers:
  - Okta
  - Azure AD (Entra ID)
  notes: SAML-based single sign-on, documented on /platform/integrations.
  sources:
  - https://www.scienceexchange.com/platform/integrations
- name: ProvidersApiKey
  type: apiKey
  in: query
  parameter: access_token
  surface: Science Exchange Providers API
  notes: >-
    The first-party se_providers_api_client Ruby gem authenticates by
    appending the API key to each request as an access_token query
    parameter (lib/se_providers_api_client/client.rb).
  sources:
  - https://github.com/scienceexchange/se_providers_api_client
  - https://demo.scienceexchange.com/api-docs/providers