Admin Authentication

Ark Admin uses OAuth 2.0 for authentication and authorisation. Currently, it supports the following flows and providers:

Provider	Authorization Code Flow	Client Credentials Flow
Entra ID	❌	✅

Roles

• Admin: Full access to the Ark Admin API.

Providers

Entra ID

References

• Microsoft Entra ID Documentation
• Microsoft Entra ID OAuth 2.0 Client Credentials Grant Flow

Entra ID Configuration Steps

1. Register the Ark Admin application in Entra ID.
2. Configure the application with the necessary permissions and scopes.
3. Configure the caller application in Entra ID to use the Client Credentials flow.
4. Give the client application the necessary permissions to call the Ark Admin API.

Platform Configuration

PASSPORT_AUTH_STRATEGY=entra-id
AUTH_MICROSOFT_ENTRA_API_ID="your-entra-id-client-id"
AUTH_MICROSOFT_ENTRA_TENANT_ID="your-entra-id-tenant-id"

OAuth 2.0 Flows

Client Credentials Flow