Uniphore · Authentication Profile

Uniphore Authentication

Authentication

Uniphore secures its APIs with oauth2, openIdConnect, and http across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials, authorizationCode, refreshToken, deviceCode, and tokenExchange flow(s).

CompanyArtificial IntelligenceAgentsConversational AICustomer Data PlatformContact CenterMachine LearningLarge Language ModelsEnterprise SoftwareAutomationCustomer ExperienceKnowledge Management
Methods: oauth2, openIdConnect, http Schemes: 3 OAuth flows: clientCredentials, authorizationCode, refreshToken, deviceCode, tokenExchange API key in:

Security Schemes

openIdConnect openIdConnect
m2mBearer http
scheme: bearer
oidcSso openIdConnect

Source

Authentication Profile

uniphore-authentication.yml Raw ↑ 
generated: '2026-08-02'
method: searched
source: https://uniphore.us.auth0.com/.well-known/openid-configuration
docs: https://uniphore.github.io/baic-docs/
note: >-
  Uniphore publishes no OpenAPI, so this profile is not derived from
  securitySchemes. It is assembled from two real, fetched sources: (1) the
  anonymous OIDC / RFC 8414 discovery document served by Uniphore's dedicated
  Auth0 identity tenant (uniphore.us.auth0.com), saved verbatim under
  well-known/, and (2) the public BAIC Installation Guide, which documents the
  machine-to-machine token exchange and the Bearer scheme used against the
  Business AI Cloud platform API.
summary:
  types:
  - oauth2
  - openIdConnect
  - http
  api_key_in: []
  oauth2_flows:
  - clientCredentials
  - authorizationCode
  - refreshToken
  - deviceCode
  - tokenExchange
  bearer_format: JWT
  pkce: true
  mtls: false
schemes:
- name: openIdConnect
  type: openIdConnect
  openIdConnectUrl: https://uniphore.us.auth0.com/.well-known/openid-configuration
  issuer: https://uniphore.us.auth0.com/
  provider: Auth0 (Uniphore-dedicated tenant)
  endpoints:
    authorization: https://uniphore.us.auth0.com/authorize
    token: https://uniphore.us.auth0.com/oauth/token
    userinfo: https://uniphore.us.auth0.com/userinfo
    jwks: well-known/uniphore-jwks.json
    revocation: https://uniphore.us.auth0.com/oauth/revoke
    registration: https://uniphore.us.auth0.com/oidc/register
    device_authorization: https://uniphore.us.auth0.com/oauth/device/code
  grant_types:
  - client_credentials
  - authorization_code
  - refresh_token
  - password
  - implicit
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:ietf:params:oauth:grant-type:token-exchange
  - urn:ietf:params:oauth:grant-type:jwt-bearer
  - http://auth0.com/oauth/grant-type/password-realm
  - http://auth0.com/oauth/grant-type/passwordless/otp
  - http://auth0.com/oauth/grant-type/mfa-oob
  - http://auth0.com/oauth/grant-type/mfa-otp
  - http://auth0.com/oauth/grant-type/mfa-recovery-code
  token_endpoint_auth_methods:
  - client_secret_basic
  - client_secret_post
  - private_key_jwt
  - none
  code_challenge_methods:
  - S256
  - plain
  id_token_signing_alg: [RS256, HS256, PS256]
  dpop: true
  backchannel_logout: true
  sources:
  - well-known/uniphore-openid-configuration.json
- name: m2mBearer
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: >-
    Machine-to-machine access token for the Business AI Cloud (BAIC) platform
    API. Exchange a client_id / client_secret pair at the deployment's
    forge-user-management service, then present the returned access_token as
    an Authorization: Bearer header on every platform API call.
  token_endpoint_path: /auth/m2m-token
  token_request_params:
  - client_id
  - client_secret
  response_field: access_token
  header: 'Authorization: Bearer <token>'
  sources:
  - https://uniphore.github.io/baic-docs/
- name: oidcSso
  type: openIdConnect
  description: >-
    BAIC deployments support enterprise OIDC single sign-on, configured through
    the forge-user-management service (oidcSso.oauthBaseUrl) and an oidc-secrets
    Kubernetes Secret. The identity provider is customer-supplied.
  configurable: true
  sources:
  - https://uniphore.github.io/baic-docs/
x-evidence:
- url: https://uniphore.us.auth0.com/.well-known/openid-configuration
  http_status: 200
  content_type: application/json
  fetched: '2026-08-02'
- url: https://uniphore.us.auth0.com/.well-known/oauth-authorization-server
  http_status: 200
  content_type: application/json
  fetched: '2026-08-02'
- url: https://uniphore.github.io/baic-docs/
  http_status: 200
  content_type: text/html
  fetched: '2026-08-02'