---
title: API Authentication
slug: api-authentication
docTags: 
createdAt: 2025-09-24T16:14:50.478Z
---

Access to the Tally Platform API is granted by calling Okta to obtain an access token. This endpoint returns an access token that allows access to all Tally Platform API services. This short-lived token will expire (valid for 1 hour), and when this happens, a new token will need to be retrieved from the OAuth get token endpoint and cached on the server until it expires again. 

To obtain the access token, the Client ID and Client Secret values are sent to Okta via Base Authentication. These will be sent to your team for connectivity. See below for more details on how to call this service.

**Okta AuthenticationRequest**

:::BlockQuote
curl --request POST \   
  \--url https\://phaedon.oktapreview\.com/oauth2/auscfbbmieFBGGOzR1d7/v1/token \    
  \--header 'accept: application/json' \    
  \--header 'authorization: Basic MG9h\*\*\*\*\*\*\*g==' \    
  \--header 'cache-control: no-cache' \    
  \--header 'content-type: application/x-www-form-urlencoded' \  
  --data 'grant\_type=client\_credentials\&scope=tpags\_\*\*WILL\_BE\_SET\_IN\_POSTMAN\*\*
:::

**Response:**

:::BlockQuote
\{    
  "access\_token": "eyJhbG\[...]1LQ",    
  "token\_type": "Bearer",    
  "expires\_in": 3600,    
  "scope": "tpags\_**WILL\_BE\_SET\_IN\_POSTMAN**"
}
:::