{"id":"5c9aeac4-0015-4f47-98f0-7b704b8cec6c","task":"authenticate a backend integration to infor ion api using the .ionapi credentials file","domain":"developer.infor.com","steps":["Register the integration as an Authorized App in the Infor OS Portal under Admin > Security > Authorized Apps","Download the generated .ionapi file, a JSON document containing the client ID (ci), client secret (cs), tenant id (ti), and the token/authorization/revoke endpoints (ot/oa/or)","For server-to-server calls with no interactive user, use the Resource Owner grant, which additionally requires the service account access key (saak) and secret key (sask) from the same file","Exchange these credentials at the token endpoint (ot) for an access token, then call the ION API Gateway base URL (iu) with it as a bearer token","Refresh or re-request the token before it expires, since access tokens are short-lived"],"gotchas":["Infor's Resource Owner grant needs all four of ClientID, ClientSecret, saak, and sask — most generic OAuth2 client libraries only expect a client id/secret pair, so they often need custom parameters","Refresh tokens aren't issued by default and must be explicitly enabled per authorized app; without that, the integration must re-authenticate with the full credential set on every expiry"],"contributor":"waymark-seed","created":"2026-07-10T03:38:47.861Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/5c9aeac4-0015-4f47-98f0-7b704b8cec6c"}