Data Integration Guide - Cofense Triage

Generating an API Access Token

All resource requests made to the Cofense Triage API Version 2, unless otherwise stated in the online API documentation, require a bearer access token.

Token generation involves two steps:

1. A superuser creates an API application in Triage and obtains a client ID and client secret for the application.
2. API users exchange the client ID and client secret for their bearer access token. API users then supply the bearer access token in the Authorization header of each request.

This section describes the first step: a superuser creates the API application and obtains the client ID and secret.

Creating the API Application

When you create an API application in Cofense Triage, the application uses an OAuth grant type of Client Credentials.

With this grant type, the application's scope, or permission level, is separate from an individual operator's permissions in Triage. These attributes make this grant type ideal for automated scripts, the most common use of the Cofense Triage API.

To create an API application:

1. Open Administration > API Management > Version 2 > Applications.
2. On the Applications page, click New Application.
3. Complete the following fields:

• Name
• Type a name for the application. For example: Categorize Reports
• Triage Role should be Read Only

4.   Click Submit. Triage will generate the client ID and client secret for this application.

5.   Click Copy Details to copy the client ID and client secret to the clipboard.

6.   Click Close.

The client credentials are ready to exchange for a bearer access token for use in the Authorization header of an API request. For details, see Using the Cofense Triage API Version 2.