Path in CC5: System Settings - Access Control - API access
This description refers to one of our optional modules/extensions containing specific functionality to make Complete Control even more complete. Your single point of contact at House of Control AS can tell you more about all our optional modules and extensions.
With an API-token, external services get access to certain areas in your Complete Control. The access can be limited to certain areas, for example People to synchronize employees added to Complete Control with your HR system. House of Control AS's own integrated solutions such as the Supplier Portal must be added here, too.
To give access to another service, you first need to create an access token and you must whitelist the service's IP address. This is done via the API access window under System settings - Access control. Once set-up, the token must be handed out to those who shall use the API.
Tip!
The API access window gives access to a detailed API documentation with more information about the setup: Authentication, response types, data types and more.
Create a new access token
Click New access token to create a new token for a certain service. Tick all boxes next to the side menus that shall be accessible. You can also enter an expiration date for the token. Once the token is created, you must give it to the related user.
Create one API per source you want to connect to. If one API shall be used to synchronize persons with an HR system, create one access for this. If you then want to synchronize assets or contracts with another system, create a new access.
Find existing access tokens
You find the token when clicking the title in the overview list. The token is unique for each API and limited according to the API definitions.
Note!
House of Control AS does not set up the API integration. It's expected that you have the required knowledge in your company.
Whitelisting of IP addresses
Once you created a new token, you must add the service to the IP-whitelist in Complete Control. This is done via IP whitelist.