ConductorOne Authentication Guide

How to authenticate ConducterOne for use with Tines

Daniel Stoeski avatar
Written by Daniel Stoeski
Updated this week

ConductorOne helps companies secure identity in their cloud apps and infrastructure through centralized identity governance and access controls.

First, create a ConducterOne API client

  1. Login to your ConductorOne tenant

  2. Click on your user account and select "API Keys"


  3. Click "Create credential"


  4. Name the client, set the expiration date and click "Create"

  5. Copy your "Client ID" and "Client Secret" to a text editor and click "Done"

Lastly, create ConducterOne credentials in Tines

You will need to create three credentials:

  • Two Text type: "conducterone_client_id" and "conducterone_client_secret"

  • One HTTP request type: "ConducterOne"

Text type

  1. Login to your Tines tenant

  2. Navigate to the team that will be using the API and click "Credentials"

  3. Click "+ New Credential" and select "Text"

  4. Input the values for the ConducterOne credential

    1. Name: "conducterone_client_id"

    2. Description: Optional

    3. Value: Your Client ID

  5. Optional

    1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains.

    2. Access: What other teams can also use the API

  6. Click "Save"

  7. Click "+ New Credential" and select "Text"

  8. Input the values for the ConducterOne credential

    1. Name: "conducterone_client_secret"

    2. Description: Optional

    3. Value: Your Client Secret

  9. Optional

    1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains.

    2. Access: What other teams can also use the API

  10. Click "Save"

HTTP request type

  1. Click "+ New Credential" and select "HTTP Request"

  2. Input the values for the ConducterOne credential

    1. Name: ConducterOne

    2. Description: Optional

    3. URL: https://<tenant>.conductor.one/auth/v1/token

    4. Content Type: Form

    5. Method: post

    6. Payload: Copy the below object and paste it into the "Plain code" section:

      {
      "grant_type": "client_credentials",
      "client_id": "<<CREDENTIAL.conducterone_client_id>>",
      "client_secret": "<<CREDENTIAL.conducterone_client_secret>>"
      }

    7. Click "Run options", navigate to the access_token key and double-click on the key

    8. Location of token from response: Paste the path to the token in the value pill

  3. Optional

    1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains

    2. Access: What other teams can also use the API

  4. Click "Save"

Your credential should look like the following:

More on creating credentials in Tines here.

You can also find a selection of ConducterOne stories in the story library.

Did this answer your question?