Authentication

An authentication session ID is obtained from the access service by sending a POST request. This authentication session ID can be used by all other services as an identity credential. The authentication ID is invalidated after a timeout period set by the user’s session timeout property. The default is usually 15 minutes. A DELETE request can be used to logout and invalidate the session ID.

An authentication session is not required as clients can re-send authentication information with each request. Since the RESTful API operations are stateless only the authentication ID is stored.