Aritma ID

Aritma ID is a security token service. To access any Aritma API you need to get tokens from Aritma ID. The token service has a few responsibilities:

• User registration
• Application registration
• Initiate and maintain user sessions
• Issue user security tokens
• Issue application security tokens

Open ID Connect

Aritma ID supports OpenID Connect (OIDC). The OIDC discovery document is available at: https://id.aritma.io/{tenant}/.well-known/openid-configuration. For existing integrations use common tenant (https://id.aritma.io/common/.well-known/openid-configuration).

NOTE https://id.aritma.io/.well-known/openid-configuration will remain functional for backward compatibility.

Tenancy

Aritma ID support tenancy. After you have recieved a tenant and finished all initiating processes, the users can create new Aritma ID accounts for that tenant.

User registrations

To get a Aritma ID user, browse to https://id.aritma.io/{tenant}/User/Registration/CreateAccount.

Application registration

We do not provide self service to create application registration. Please contact Support to register an application.

Authorization flows

User security tokens

The token service support the following user authorization flows:

• Authorization Code Flow
• Authorization Code Flow with PKCE
• Client Initiated Backchannel Authentication (CIBA) Flow
• Device Code
• Password flow ⚠️
• Implicit flow ⚠️

Application security tokens

The token service support the following application authorization flows:

• Client Credentials
• Client Assertions
• Delegation (aka token exchange)
• Refresh Token