To authorize REST API calls to SAP Customer Data Platform, it is recommended to create a server application from the application library. When using a server application to make API calls, you can authenticate with an asymmetric RSA key pair, or a user key and secret combination. The process involves creating an application in SAP Customer Data Platform and then finding and saving your client key and secret, which are used to get a Gigya JWT token using OAuth 2.0.
References = This information is supported by the SAP Help Portal documentation on OAuth 2.0 Compliant REST API and Signing Requests to SAP Customer Data Platform12.
To obtain the application key and secret for authorizing REST API calls in the SAP Customer Data Platform, the recommended approach is:
D. By creating a server application from the application library.In the SAP Customer Data Platform, the application library serves as a centralized location where various applications can be managed and configured. By creating a server application within this library, you are provided with an application key and secret. These credentials are used to authenticate REST API calls securely, ensuring that only authorized applications can access and interact with the platform's data and services.
This method of obtaining credentials helps maintain a secure and controlled environment for API interactions, safeguarding against unauthorized access to sensitive customer data.
References:
SAP Customer Data Platform documentation on application management and API security.
Technical guides on setting up server applications and generating authentication credentials for API access.