Configure OneStream API for External Authentication

For customers in a self-hosted environment, we support REST API authentication with Azure Active Directory (Azure AD [Microsoft Entra ID]), Okta, and PingFederate. Perform the configuration for your provider:

If you use the Modern Browser Experience, you must enter a REST API key in both the OneStream Application Server Configuration and Web Server Configuration to enter OneStream and browser clients. See the Installation and Configuration Guide.

For customers in a OneStream-hosted environment, see the Identity and Access Management Guide for information about authentication with OneStream IdentityServer and using personal access tokens (PATs).