Authentication
How to authenticate with the Opti ID User Management and SCIM APIs.
For testing and debugging only The browser token workflow on this page is for ad-hoc testing and debugging only. Do not use a token copied from your browser session for production integrations, that is, apps, scripts, or scheduled jobs that call the APIs on an ongoing basis. See Using the APIs in your own apps for the supported approach.
Opti ID User Management APIs
The Opti ID User Management APIs require an OAuth 2.0 bearer token.
Important: Treat this token as a secret The access token you get from your browser session is tied to your user account and carries all of your Opti ID permissions. Anyone who has it can act as you.
- The token is valid for approximately 60 minutes.
- Do not share the token in chats, emails, support tickets, screenshots, screen recordings, or HAR files.
To get your bearer token:
- Go to the Opti ID home dashboard.
- Open your browser's developer tools. You can get your bearer token on the Console or Application tab:
- Console tab – Run the following command and copy the token that is returned:
JSON.parse(sessionStorage.getItem("okta-token-storage")).accessToken.accessToken
- Application tab – Go to Session storage > https://home.optimizely.com > okta-token-storage, then expand and copy the accessToken value.
- Include your bearer token in the headers of your Opti ID User Management API requests. For example:
curl --request GET \
--url https://usermgmt-api.optimizely.com/api/attributes \
--header 'accept: application/json' \
--header 'authorization: Bearer examplebearertoken'Opti ID SCIM APIs
The Opti ID SCIM APIs require an API key that you must request from Optimizely Support. Treat your API key as a secret and include it in the headers of your Opti ID SCIM API requests. For example:
curl --request GET \
--url https://identity-api.optimizely.com/api/scim/v2/groups \
--header 'accept: application/json' \
--header 'Authorization: exampleapikey'Using the APIs in your own apps
If you're building a production integration, that is, an app, script, or scheduled job that calls the Opti ID User Management APIs on an ongoing basis, contact Optimizely Support to request credentials for your app.
Important: Do not use a bearer token copied from your browser
Do not use a bearer token copied from your browser as that token expires after approximately 60 minutes and is tied to your user account, not to your app.
Try it
Each endpoint page in the API reference has an interactive Try it panel that sends real requests from your browser. To use it:
- In the Credentials section, provide your authentication:
- Opti ID User Management API – Click Use Your Own Token and paste the bearer token you copied from your browser.
- Opti ID SCIM API – Enter the API key you requested from Optimizely Support.
- Enter any required path, query, or body parameters.
- Click Try it to send the request and view the response.
Important The Try it feature makes requests against your production data, so use caution when making any requests that change your data (POST, PUT, PATCH, and DELETE).
