Applications

In the Trimble ecosystem, an application refers to any Trimble application that is intended to be accessed by an end user. Essentially, an application refers to a software solution that provides specific functionalities to support various business processes and improve collaboration across different sectors. More details about managing applications can be accessed here.

Applications play a crucial role in managing and utilizing Trimble’s services and APIs, facilitating the integration and interaction between different components of the Trimble ecosystem.

Application and Account Association

To enable streamlined lifecycle management and integration, an application must be associated with only one account. This association also segregates data, ensuring data isolation. Administrators can assign or revoke access to applications linked to an account through subscription.

Features

Caution

The Cloud Console provides a web interface for managing applications. It leverages the IAM API to deliver necessary functionality. The Cloud Console is recommended for managing applications and subscribing to APIs, with IAM operating in the background.

Attributes in an Application

Grant Type

In the context of OAuth 2.0, grant type defines the method by which a client or an application can obtain an access token. Supported grant types are as follows:

• authorization_code
• refresh_token
• client_credentials
• urn:ietf:params:oauth:grant-type:token-exchange
• urn:trimble:params:oauth:x509-cert
• urn:ietf:params:oauth:grant-type:device_code

More details can be found here

Scopes

Scopes define the specific actions that can be performed and the resources that can be accessed by an application. By implementing granular access control and adhering to the principle of least privilege, scopes ensure that applications only receive the permissions they absolutely need, thereby enhancing security and user trust.

URIs

Redirect URI

A Redirect URI is the callback URI that the OAuth provider redirects to after successful or failed authentication. It ensures that the response is sent to the intended recipient, preventing redirection attacks.

Logout URI

A Logout URI is the URI which users are redirected to after they have logged out. This allows for the cleanup of any session-related data and the presentation of the appropriate user interface.