What are the difference between creating an API client ID/Secret using the API Management screen vs PAT (Personal Access Token)? PAT is linked to a user account and thus the user permissions can be modified, but if both have the scopes set to ‘sp:scopes:all’ and the user is an Admin, are there API …

The API Management screen is for creating and managing OAuth clients with varying grant types. If you create a token with the client credentials grant type, then it doesn’t have a user assigned to it, so it has very little access. Only a handful of API endpoints, as @Angelo_Mekenkamp_Hnk pointed o…

Example of API that unfortunately does not work with PAT: query-password-info | SailPoint Developer Community Query Password Info

[image] Colin McKibben: Only a handful of API endpoints, as @Angelo_Mekenkamp_Hnk pointed out, can be accessed with an OAuth token of client credentials. I did not say that only a couple of API endpoints can be accessed with an OAuth token of client credentials. I gave an example where an API…

API Management vs PAT

Identity Security Cloud (ISC) ISC Discussion and Questions

Angelo_Mekenkamp_Hnk (Angelo Mekenkamp) March 14, 2023, 1:26pm 2

Example of API that unfortunately does not work with PAT:

Workflow HTTP Action got stuck in running state no error

Topic		Replies	Views
Discrepancy Between PAT and API Management Client Credentials in Identity Security Cloud ISC Discussion and Questions identity-security-cloud	14	184	January 9, 2026
Difference between API Keys and Personal Access Token ISC Discussion and Questions apis , identity-security-cloud	5	2198	October 26, 2023
Problem with token creation ISC Discussion and Questions identity-security-cloud	3	171	April 8, 2025
Personal Access Tokens now available to all users Announcements identity-security-cloud	2	1858	July 11, 2022
Authorization in Workflows and APIs ISC Discussion and Questions workflows , identity-security-cloud , authentication , authorization , api	3	126	May 21, 2025

API Management vs PAT

Related topics