Grant Type Password

Scott Wallace
Scott Wallace
  • Updated
POST https://api.actonsoftware.com/token


The grant type password will return two important items.

Customers wanting to access our API via our gateway in the EU can use this link: 

POST https://api-eu.actonsoftware.com/token
  1. access_token - Store the returned access token in your application to authenticate the other endpoint requests. The access token expires after 3600 seconds.
  2. refresh_token - Password or Code grant types are limited to 5 authentication attempts per hour. Using the refresh token workflow avoids unneeded access token requests and prevents your application from reaching this limit. The refresh token does not expire until a new token is requested via any of the Grant Type calls.

You can find more information on the refresh token here.

Parameters

Name Parameter
Type
Allow
Multiple
Required/
Optional
Data Type Description
grant_type x-www-form-urlencoded False Required string The value must be set to 'password'.
username x-www-form-urlencoded False Required string The email address of a user in the Act-On account you are trying to access.

Any special characters in the email address (besides '@') must be URL encoded.
password x-www-form-urlencoded False Required string The password associated with the username.
client_id x-www-form-urlencoded False Required string The Client ID you received in your welcome email.
client_secret x-www-form-urlencoded False Required string The Client Secret you received in your welcome email.

Response

{ 
   "access_token":"12345678-9abc-defg-hijk-lmnopqrs",
   "refresh_token":"12345678-9abc-defg-hijk-lmnopqrs",
   "scope":"default",
   "token_type":"Bearer",
   "expires_in": 86400
}


Code Examples

cURL

curl -X POST https://api.actonsoftware.com/token -d 'grant_type=password&username=john.doe@act-on.com&password=eodnhoj1&client_id=123456789abcdefghijklmnopqrs&client_secret=123456789abcdefghijklmnopqrs'
Note: Following an upgrade to Act-On's API infrastructure in late 2023, check that the new URL, client ID, and secret are used. See API Infrastructure Upgrade for more information.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request