Service Accounts for Billie Connect

Overview

Aria derives Billie Connect's guard rails from the permissions assigned to the role of the service account associated with Billie Connect.

Service Accounts, similar to Custom Dashboards, are intended to be used for external applications to communicate with Aria. Instead of authenticating via passwords, Service Accounts use generated keys to authenticate.

Service accounts in the Aria ecosystem represent machine-to-machine authentication credentials using OAuth 2.0 client credential flow. Service Account components include:

• Service Account ID = OAuth 2.0 client_id
• Service Account Key = OAuth 2.0 client_secret

You obtain these values from the service account you have created to use with a Billie Connect session.

How Service Accounts Can be Used with Billie Connect

General—wide-range

Service accounts can be limited to service a single account or account group.

Act-as (forthcoming feature)

Access Control

Service Accounts enforce strict access control in the following ways:

• JWT token client_no must match request client_no
• JWT token account_no must match requested account (if specified)
• API key validation against client credentials