Authentication

all csl sim insight api requests must be authenticated authentication ensures that requests are associated with a valid account permissions are enforced all activity is logged securely unauthenticated requests are not processed authentication model each api request must include valid account credentials these credentials identify your account authorise the requested action control the scope of permitted operations authentication details are included as part of every request requests submitted without valid credentials will be rejected account scope authentication is account bound this means requests can only act on sims and groups associated with your account permissions reflect your account configuration access cannot extend beyond authorised scope if your account is restricted to specific sim types, groups, or customers, api access will follow the same restrictions security responsibilities api credentials must be stored securely be protected from unauthorised access not be embedded in client side applications credentials should only be used within secure server side systems because api commands can perform immediate operational changes, safeguarding credentials is critical failed authentication if authentication fails the request will not be processed an error response will be returned integrating systems must detect and handle authentication failures appropriately