Creating Client Credentials for Worker Nodes

You can create client credentials using the OAuth 2.0 authorization framework to grant access to Data Discovery operations in OneTrust for external systems and worker nodes.

To create client credentials

  1. Click the gear icon button in the upper right-hand corner to access Global Settings.
  2. On the Global Settings menu, select Credentials. The Credentials screen appears.

  3. Click the Add button. The Client Credentials section of the Add Client Credential screen appears.


  4. In the Name field, enter a name for the client credential.
    Note:

    The name cannot be modified once the client credential is created.

  5. Optional: In the Description field, enter a description for the client credential.
  6. Optional: In the Access Token Lifetime field, select the amount of time that should pass before the access token expires. The following options are available:

    • 1 Hour

    • 1 Day

    • 1 Week

    • 1 Month

    • 1 Year

  7. Optional: Turn on the Restrict IP Addresses setting to restrict incoming communication to specific IP addresses. If this setting is enabled, enter an IP address in the Restrict IP Addresses field that appears. You can enter multiple IP addresses by clicking the Add icon button and entering an additional IP address in the field that appears.
  8. Click the Next button. The Scope section appears.

  9. Navigate to Data Discovery and enable the DATA_DISCOVERY scope.


  10. Click the Create button. The Client ID and Secret section appears.


  11. Click the Download button. A .txt file containing the Client ID and Client Secret details will download to your local system.
    Attention:

    The Client ID and Client Secret details should be saved to a secure, external location. The Client Secret cannot be retrieved or access again once you've left this screen.

  12. You can also click the Copy buttons to manually copy the Client ID and Client Secret.
  13. Click the Close button.