Authentication and authorization

On all APIs the Bosch IoT Suite services will protect the access to functionality and your data by using

• Authentication to make sure the requester is the one he states

• Authorization to make sure the requester is allowed to see, use or change the information he wants to access

• Identification of your solution whenever an API is called

The following sections explain who needs to authenticate in which scenario.

• Auth for service subscription

• Auth for subscription management

• Auth for private Vorto repositories

• Auth for device provisioning

• Auth for sending device data to the device connectivity layer

• Auth for forwarding device data via connections

• Auth for accessing data via digital twin layer

• Auth for managing software updates