Infor ION API Credentials

Description

General

• Documentation: https://docs.infor.com/inforos/latest/en-us/useradminlib_cloud/apigatewayag_cloud/lpa1489500371574.html
• Summary: Infor ION API Gateway issues OAuth client credentials for authorized applications. This detector finds the client id (ci) and client secret (cs) from .ionapi files and equivalent environment assignments. When present in the same dump, it also captures the authorization host and token endpoint. Validity can be checked when the authorization host is present.

Revoke the secret

Credentials can be rotated by generating a new authorized application or service account in the Infor ION API Gateway and replacing the downloaded .ionapi file.

Details for Infor ION API Credentials

• Family: credentials

• Category: other

• Company: Infor

• High recall: False

• Validity check available: True

• Analyzer available: False

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 0.01

• Prefixed: False