Penfold Partner API

Authentication

O auth2 client credentials (oauth2)

Azure AD B2C OAuth2 client credentials. Penfold provisions an app registration per partner (client ID and client secret). Your servers obtain access tokens from the token endpoint and send them as Bearer tokens. There is no interactive partner sign-in on these endpoints.

Flow type clientCredentials
Token URL https://login.microsoftonline.com/36d1ec63-a7dc-48ca-a634-5514be9a63dd/oauth2/v2.0/token
Scopes
  • https://penfoldstaging.onmicrosoft.com/<client_id>/.default:

    Access the API on behalf of your organisation