Is there a way to pass Login Credentials to OAuth?

Is there some way to pass the login credentials to the authorization request URL?

Our company partners with Universities and provides them with a way to run fund raising campaigns. The people actually using the program are generally students working in a temporary capacity. Ideally we don't want to share the account login credentials with them if we can help it.

Best case scenario, the student caller clicks a payment button in our program, a new tab opens, they click “Authorize”, and then I can proceed with the actual payment request. So, is there a way for me to pass the login credentials so the student callers don't have to know/enter that information?

Comments

  • Daniel Leonard
    Daniel Leonard Blackbaud Employee
    Eighth Anniversary Kudos 2 Name Dropper Participant

    @WBT Tech The credentials of the user are taken from the authorization header of the request and cannot be passed to the authorization request URL. Each person authorizing will need to have a Blackbaud ID (BBID) that is related to the Blackbaud environment that is connected to your SKY application.

    When the user is directed to the authorization page, they will be directed to the BBID sign in page, if they are not already signed in. When the user clicks authroize, your application should receive the authorization code needed to gain an access token. You will then need to call the OAuth token endpoint to exchange the authoization code for an access token (and refresh token). Once you have the access token you should be able to communicate with the Payments API.

Categories