Prerequisites
- A Portão 3 API client. Your account manager provides its API client credentials (
client_id/client_secret). - Your
realmIdandorganizationId, shared during onboarding. Tenant-scoped endpoints require both in the path.
Step 1: Get an access token
Authenticate against the Identity service with your API client credentials. Send yourclient_id and client_secret as HTTP Basic credentials, and set grantType to client_credentials in the body:
accessToken as your bearer token on every API request.
Step 2: Make your first call
Verify the token by fetching the identity it belongs to:200 response confirms your token works.
Step 3: Call a tenant-scoped endpoint
Most endpoints are scoped to your realm and organization. For example, list your billing deals:403, check that the realmId and organizationId in the path match the tenant your credentials belong to.
Step 4: Renew your token
Access tokens are short-lived. When one expires, request a new one by repeating Step 1 with your client credentials.Next steps
Browse the API Reference
Every endpoint across all Portão 3 services, with schemas and examples.
Get support
Questions about credentials, tenancy, or a specific endpoint? We can help.