UiPath Documentation
orchestrator
2022.10
false
  • Getting started
    • About OData and references
    • Enumerated types
    • Authenticating
    • Building API Requests
    • Permissions per endpoint
    • Response codes
    • Health Check Endpoints
  • Authentication
    • Authentication methods
    • External Applications (OAuth)
    • ROPC (not recommended)
  • Swagger definition
    • Read me
    • Authorizing API calls in Swagger
    • Managing logical resources
  • Orchestrator APIs
    • Alerts requests
    • Assets requests
    • Calendars requests
    • Environments requests
    • Folders requests
    • Generic Tasks requests
    • Jobs requests
    • Libraries requests
    • License requests
    • Packages requests
    • Permissions requests
    • Personal workspaces requests
    • Processes requests
    • Queue Items requests
    • Robots requests
    • Roles requests
    • Schedules requests
    • Settings requests
    • Tasks requests
    • Task Catalogs requests
    • Task Forms requests
    • Tenants Requests
    • Transactions requests
    • Users requests
    • Webhooks requests
  • Platform Management APIs
    • Getting started
      • About this guide
      • Available resources
      • API endpoint URL structure
      • Enumeration List
    • Scopes and permissions
      • About scopes and permissions
      • Platform Management scopes and permissions
    • Platform Management APIs
      • Audit Logs
        • Get Audit Logs
        • Download Audit Logs
      • Groups
        • Get All Groups
        • Get Specific Group
        • Delete Specific Group
        • Create a New Local Group
        • Update Group
      • Robot Account
        • Get All Robot Accounts
        • Delete Robot Accounts
        • Get Specific Robot Account
        • Delete Specific Robot Account
        • Create a New Robot Account
        • Update Robot Account
      • User
        • Update User
        • Delete Specific User
        • Delete Users
      • Settings
        • Get Settings
        • Update Settings
      • Message Template
        • Get Message Template
        • Update a Message Template
        • Get Message Template by Name
UiPath logo, featuring letters U and I in white
OUT OF SUPPORT

Orchestrator API guide

Last updated Dec 16, 2025

Authentication methods

Our API supports various authentication methods, each tailored to different scenarios and use cases. Here's an overview of the authentication methods available:

  • OAuth 2.0 for External Apps: OAuth 2.0 is designed for third-party applications seeking access to our platform on behalf of users. It facilitates secure authorization without exposing user credentials. External apps can register with us, obtaining client credentials that identify them. This method is recommended for larger integrations and applications accessing multiple users' data.

  • ROPC (not recommended): Resource Owner Password Credentials (ROPC) is an authentication method that allows users to provide their username and password directly to the authorization server to obtain an access token. It is less secure and not recommended compared to token-based methods like OAuth.

Was this page helpful?

Connect

Need help? Support

Want to learn? UiPath Academy

Have questions? UiPath Forum

Stay updated