Calimatic
Developer PortalSign in

Calimatic Auth Documentation

Everything you need to integrate with the Calimatic Identity platform. Choose your path below to get started.

OAuth 2.0OpenID ConnectSCIM 2.0WebhooksUser Provisioning APIHeadless Auth API

Quick Links

OIDC DiscoveryJWKS EndpointFull API Reference

REST API Authentication

All platform REST endpoints (/api/v1/organizations/*, /api/v1/users/*, etc.) accept any of four authentication modes. Pick whichever fits your stack — the same app client credentials work in all of them.

ModeHeadersWhen to use
App Client (Basic)x-client-id + x-client-secretSimplest. No token management.
OAuth2 BearerAuthorization: Bearer <token>Standard OAuth2. Cache the token for its TTL (default 1h).
API Keyx-api-keyOrg-scoped key (cannot cross orgs).
Session CookieNextAuth session from Calimatic Auth loginAdmin dashboard, in-browser calls.

Bearer tokens are obtained from POST /api/v1/oidc/token with grant_type=client_credentials. Only client_credentials tokens are accepted on REST endpoints — user-context tokens (from authorization_code) will return 401.

Choose Your Path

Pick the guide that matches your situation.

Category 1

Building a New Calimatic App

Greenfield integration. Register your app, configure OIDC, and start authenticating users in minutes.

Get started
Category 2

Migrating an Existing Calimatic App

Move existing users and organizations to Calimatic Auth. Includes bulk import, dual-auth, and cutover planning.

Get started
Category 3

Integrating a Third-Party App

Add Calimatic login to your application using standard OAuth 2.0 / OIDC. No special SDK required.

Get started
Category 4

Importing Existing Users

Already have users? Bulk import them into Calimatic Auth with deduplication, role mapping, and org assignment.

Get started

API Reference

OAuth / OIDC Endpoints

Authorization, token, userinfo, introspection, revocation, and discovery.

User Management API

Provision, import, resolve, and manage user passwords programmatically.

Webhooks

Subscribe to real-time events: user created, password reset, license changes.

SCIM 2.0

Enterprise user provisioning via the standard SCIM protocol.

Headless Auth API

Direct API authentication: login, MFA, signup, password reset, sessions, and security.

Guides

Integration Guide

Next.js, React SPA, Python, PHP, and manual OAuth integration guides.

User Provisioning

How provisioning, auto-licensing, and org membership work.

Base URL

https://auth.calimatic.com

Discovery

https://auth.calimatic.com/.well-known/openid-configuration