Skip to content

Is there a dedicated REST API that can be called to authenticate an IFS user — passing a username and password to simply check whether the credentials are valid, separately from any actual business operation?

Answer

No, and this is by design rather than an oversight — a standalone 'check if these credentials are valid' API is considered a poor authentication pattern, since it separates authentication from the actual operation being performed. The intended pattern is that authentication happens as part of the same request that performs a real business operation (for example, HTTP Basic auth credentials embedded directly in the header of a call that queries or updates data), not as a separate pre-check call. More broadly, using OAuth2/OpenID Connect instead of HTTP Basic authentication wherever possible is the recommended approach, rather than relying on username/password credentials being passed around directly.

← Browse Integrations and APIs questions