Build Number	Database	OS
3531	SQL	Windows

Hi,

I am building a machine-to-machine REST API integration between our AwareIM application and two contact centre platforms — NICE CXone and Genesys Cloud. Both platforms will call iConciergeCRM REST services to perform screen pop lookups and post completed interaction data.

I have noticed the “Service will be protected by OAuth2.0 protocol” checkbox in the “Services” REST Service Settings dialog and would like to understand whether it is suitable for my use case before I decide whether to use it or implement OAuth 2.0 manually (screenshot attached)

My specific questions are:

What OAuth 2.0 grant type does the built-in implementation use?
- Does it support Client Credentials (machine-to-machine where no user is present)?
- Or is it Authorization Code only (requires browser-based user login)?
What token endpoint URL does AwareIM generate when the checkbox is enabled?
- Is it a predictable path such as /AwareIM/REST/{ServiceName}/token or something else?
- Is the token endpoint URL documented anywhere?
What is the token request format?
- Does it accept a standard application/json POST body with clientId and clientSecret?
- Or does it use application/x-www-form-urlencoded with grant_type=client_credentials?
What does the token response look like?
- Does it return a standard { access_token, token_type, expires_in } JSON response?
Is the token lifetime configurable i.e. 3600 seconds?
Where are the OAuth client credentials (client ID and secret) configured in AwareIM?
- Is there a separate OAuth client management screen, or are they tied to AwareIM user accounts only?

Context: NICE CXone Studio and Genesys Cloud Architect both support calling a token endpoint to obtain a Bearer token before making API calls. If AwareIM’s built-in OAuth2.0 supports the Client Credentials flow and generates a standard-compliant token endpoint, it would simplify our integration build considerably. If it uses Authorization Code flow only, we will need to implement a custom token endpoint via a dedicated REST service and process.

Thank you in advance, any assistance is kindly appreciated.