It is necessary to define an access configuration in order to authorize the secure connection of external systems to the CARL Source APIs using an authentication mechanism based on the OAuth2 protocol, JWT tokens, and public/private key pairs or a shared secret.

CARL Source acts as a security manager that verifies user credentials and provides them with temporary access.

Each connection of an external system to the CARL Source APIs must be accompanied by an authentication configuration, based on one of the two available methods:

• The access URL to the corresponding JWK keys;
• The generation on the CARL Source side of a secret key to be communicated to the external IS.