# API Token auth in Http call in workflow

**URL:** <https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159>\
**Category:** SHF Discussion and Questions\
**Tags:** workflows, sailpoint-identity-security\
**Created:** [April 21, 2025, 8:43pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159 "2025-04-21T20:43:57Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![vbdm](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vbdm/32/26869_2.png) [@vbdm](https://developer.sailpoint.com/discuss/u/vbdm)\
**Post date:** [April 21, 2025, 8:43pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/1 "2025-04-21T20:43:58Z")

</div>

Hi team,

I want to make Https call to Okta from a workflow. So to connect to Okta, like in the SaaS Okta connector, the preferred route is to use Private key to generate jwt token and use this jwt token to generate the access-token or the API token route. We cannot use clientID, clientSecret route(custom authorization server).

Pivate key route:

- I dont think there is a way that we can use the private key to generate the jwt token and then use this in the Https call to get the access token

API Token route

- Is it possible to use API token as auth in http call within workflow?

thanks in advance

---

<div class="post-metadata">

**Author:** ![NeetuDixit](https://avatars.discourse-cdn.com/v4/letter/n/e8c25b/32.png) [@NeetuDixit](https://developer.sailpoint.com/discuss/u/NeetuDixit)\
**Post date:** [April 21, 2025, 11:09pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/2 "2025-04-21T23:09:25Z")

</div>

Hi Veera,

Looked into Okta SaaS connector guide and can see there are two ways of authentication suggested:

1. via API token
2. via OAUth2.0 which is using JWT token.

Attaching authentication with an API token steps for reference:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/f/8f6a069e2657c39d67df2bad3a8685214218d356.png)

Let me know if you looking for same or looking for an option of connecting Okta via Webservice Connector and then authentication using API token ?

---

<div class="post-metadata">

**Author:** ![vbdm](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vbdm/32/26869_2.png) [@vbdm](https://developer.sailpoint.com/discuss/u/vbdm)\
**Post date:** [April 22, 2025, 1:55pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/3 "2025-04-22T13:55:44Z")

</div>

Hi Neetu

I want to use API Token in http action inside workflow

Regards

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [April 22, 2025, 2:04pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/4 "2025-04-22T14:04:46Z")

</div>

Try this in your httpRequest action:  
Type: `Custom Authentication`  
Header name: `Authorization`  
Header Value: `SSWS {{api_key}}`

---

<div class="post-metadata">

**Author:** ![sup3rmark](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sup3rmark/32/36229_2.png) [@sup3rmark](https://developer.sailpoint.com/discuss/u/sup3rmark)\
**Post date:** [May 9, 2025, 1:53pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/5 "2025-05-09T13:53:14Z")

</div>

note that the header value is not encrypted, so the API key will be stored in plain text.

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [May 9, 2025, 2:07pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/6 "2025-05-09T14:07:43Z")

</div>

In case of Custom Authorization it’s encrypted

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/4/5/45a6add61c6a9473e115b92051cb422972e0d607.png)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 8, 2025, 2:07pm UTC](https://developer.sailpoint.com/discuss/t/api-token-auth-in-http-call-in-workflow/114159/7 "2025-07-08T14:07:48Z")

</div>

Closed on July 8, 2025, 2:07pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.