An application used by people (a web or mobile app) can let its users log in with their Things5 account using standard OAuth 2.0 / OpenID Connect (authorization code flow with PKCE). The application then calls the Things5 API on behalf of the logged-in user, with that user's permissions (for example Device list).
Things5 keeps managing the users: creation, deletion, roles and permissions.
To set up an integration:
- Ask your Things5 tenant provider for access to the platform.
- Ask us to create an OAuth client for your application, giving its URL and redirect URIs (e.g.
https://yourapp.com/callback). - We send you the client ID (and a client secret, for server-side applications).
The OpenID configuration of your realm is at https://auth.things5.digital/auth/realms/{realm-id}/.well-known/openid-configuration (see General parameters for the realm id). Any certified OpenID Connect library can be used.
Software without a person
For server-to-server integrations and factory stations use an API integration instead.