The Arup APS Authentication Service is a wrapper around Autodesk Platform Services (APS) OAuth 2.0 authentication, providing better control of user-delegated and app-only token scopes.
By centralizing token creation and management, the Arup governance team is able to implement their security policies and maintain stricter control over the scopes of generated access token.
App credentials and registered callback urls provided by Arup's APS team must be used with the aps.arup.com endpoints. They will not work if calling the Autodesk authentication endpoints directly ensuring custom integration apps are only able to access pre-approved functionality within the APS platform.
aps.arup.com shifts authentication authority from individual applications to a centralized governance layer, enabling enterprise-wide security policies, compliance monitoring, and controlled access to APS resources.
Review the OAuth steps laid out in the Autodesk APS OAuth 2.0 Documentation .
Replace the developer.api.autodesk.com domain with aps.arup.com when requesting access tokens.
This allows the Arup's APS Authentication Service domain to log the request and restricts the scopes of access tokens to approved values. Use the app credentials and registered callback urls provided by Arup's APS team.
This process ensures your authentication flow will acquire access tokens that are compliant with Arup's governance policies.
For further guidance on Arup's APS governance and security policies APS Developer Network Sharepoint Site
Redirect users to the authorization endpoint https://aps.arup.com/authentication/v2/authorize to acquire the user's consent for your app to access the specified resources.
They will be prompted to log in with their Autodesk account and to grant permissions based on the scopes your app is requesting.
Then use the https://aps.arup.com/authentication/v2/token endpoint to convert the resulting authorisation code to an access token.
For server-to-server and Secure Service Account (SSA) two-legged token requests, use the https://aps.arup.com/authentication/v2/token endpoint directly to obtain an access token.
The Arup APS service will validate requested scopes and redirect_uri against the approved list that have been registered for the application before forwarding to Autodesk.