Service accounts

A service account represents a non-human user entity that uses access tokens to authenticate to Talend Cloud and call a Talend service.

With service accounts, you are enabled to use the OAuth2 Client Credentials Flow for accessing Talend Cloud APIs

• The host to be used to access this API service is: https://api.<env>.cloud.talend.com
• For the complete API documentation of this service account service, see Service Accounts

You also need to generate a service account token for your service account to access Talend Cloud. This token is not a personal access token. It is based on a standard OAuth2 Client Credentials flow and needs to be generated via this API service endpoint: https://api.<env>.cloud.talend.com/security/oauth/token The following diagram shows how this OAuth2 Client Credentials flow works:

The service account specific token is a new authentication method adopted by Talend APIs. This method is more secure than the personal access tokens typically used by a user. It is recommended to use service accounts along with their access tokens to issue API calls, when a specific user does not need to be involved in these calls.

Prerequisites to access this service account management API:

• Use your personal access token to call the API. For further information about how to generate a personal access token and how to use this token, see Generating a Personal Access Token.

In the following examples, the API requests are implemented in Talend API Tester for demonstration purposes.

If you want to use Talend API Tester to test these use cases, go to Service Accounts and click Try in API Tester.