Skip to content
Identity and Access Management

Get Started with IAM

The Identity and Access Management (IAM) provides a platform interface API to be utilized by both producers and consumers of mastered data. To use the IAM API available in the Trimble Cloud Console, the following are prerequisites.

Prerequisites

Section titled “Prerequisites”

Use the following getting started guides to create an application, subscribe to an API, and generate an access token:

  1. Create an application in Trimble Cloud Console.

  2. Subscribe to the IAM API.

    Environment API Product Proxy Name
    Production IAM iam-1.0
    Staging IAM iam-1.0

  3. Submit an onboarding request using the Onboarding Form to assist the IAM Product team with processing your integration.
    [Note: If your request involves accessing user data from IAM, please submit the Users Read Admin Provisioning Form.]

  4. If the onboarding request includes any users requiring IAM access, then upon approval by the IAM Product team, an invitation email will be sent to those users. The invitation must be accepted in order for the onboarding process to be completed.

  5. Ensure the token scope includes iam when generating your access token. IAM supports both Bearer and DPoP — choose the flow that matches your integration:

    5a. If your application needs to access IAM APIs with a standard Bearer token, generate a Bearer access token and use Authorization: Bearer <token> when calling IAM APIs.

    5b. If your application needs to access IAM APIs using a DPoP-bound access token instead of a standard Bearer token, follow the Access IAM APIs with DPoP guide.

  6. Begin calling the IAM API using your access token in the header of your API calls.