Obtaining an Access Token

EMS clients require an access token to connect to an EMS server configured with OAuth 2.0 authentication. Additionally, an EMS server itself may require an access token to connect to another EMS server or a TIBCO messaging product that is configured for OAuth 2.0 authentication.

Note: EMS only supports access tokens in the form of signed JWTs with asymmetric validation keys generated using the following algorithms: RS256, RS384, RS512, ES256, ES384, ES512, PS256, PS384, PS512, and EdDSA. JWTs signed with asymmetric validation keys generated using other algorithms, JWTs signed with symmetric validations keys, and unsigned JWTs are not supported.

The EMS client APIs and the EMS server can be configured to use either the Client Credentials grant or Resource Owner Password Credentials grant for obtaining OAuth 2.0 access tokens.