Authorization & authentication

Read as Markdown

Authentication identifies your application on every request. Authorization grants it access to calendars, either one person’s, a whole organization’s, or an Organizational Unit.

These endpoints cover authenticating and each way of obtaining authorization. The Authorization & Authentication guide explains which to choose.

In this section

Authentication

There are two forms of authentication within the Cronofy API. Broadly speaking this is split into two categories 1) Authenticating as a specific user 2) Authenticating as an application

Individual Connect

Authorization to access a user's calendars is done via the OAuth 2.0 protocol, Specifically the "Authorization Code" version of authorization as specified in 4.1 of RFC 6749

Enterprise Connect

Enterprise Connect allows you to gain access to the calendars of an entire organization. This eliminates the need to have each calendar user in an organization individually grant access to their calendar.

Organization Connect

Authorization to access a user's Cronofy Organization Account calendars is done via the OAuth 2.0 protocol, Specifically the "Authorization Code" version of authorization as specified in 4.1 of RFC 6749