App + user token

Use this approach if you want an access token to have app + user context. In this case, EmbedFAST will retrieve user identification from the token and use it for authentication and authorization (access control and validation).

Note:

• The EmbedFAST Admin API requires this approach.

• The EmbedFAST User (Client) API can use this approach if authentication and authorization are integrated with Microsoft Entra ID.

1. Log into Postman.

2. Go to the Workspaces tab > My Workspace.

   
3. Click on the + icon next to the Overview tab to create a new request.

1. This will take you to a new request page.

1. Click on the Authorization tab below the entry field.

1. From the drop-down menu next to Type, select OAuth 2.0.

1. Add parameters under the Configure New Token section as detailed in the table below:

Parameters	Inputs
Token Name	Create and enter a token name
Grant Type	Select Implicit
Callback URL	https://oauth.pstmn.io/v1/browser-callback
Auth URL	https://login.microsoftonline.com/<Your-Tenant-ID>/oauth2/v2.0/authorize
Client ID	Enter the client ID of the EmbedFAST API's app registration
Scope	Enter the scope added in the EmbedFAST API's app registration
State	Leave this blank
Client Authentication	Send as basic Auth header

Reminder: Ensure that the callback URL is added as a redirect URI in the app registration for the EmbedFAST API, as detailed in previous sections.

1. Click on Get New Access Token after entering the parameters detailed above.

1. A dialog box will appear which confirms the completion of the authentication.

1. You can copy the access token from the page shown below.