---
title: "Authentication"
description: "Authentication to Visma Net API via Visma Connect involves multi-tenant identity providers. Requires creating an app in Visma Developer Portal."
lang: en
languages:
  en: https://docs.vismasoftware.no/vismanetapi/authentication/index.md
lastmod: 2026-01-28
---

> Documentation index: https://docs.vismasoftware.no/vismanetapi/authentication/llms.txt


# Authentication

Last modified January 28, 2026

> Authentication to Visma Net API via Visma Connect involves multi-tenant identity providers. Requires creating an app in Visma Developer Portal.


Authentication to Visma Net API is done through Visma Connect. Visma Connect is a multi-tenant identity provider. Tenants are organizations (businesses) that provide an API-context. A given user may have access to multiple tenants and will choose which to connect to your application upon each single sign-on flow.

> [!TIP]
> You'll need to create an application in the Visma Developer Portal, available at <https://oauth.developers.visma.com>, before getting started.

> [!TIP]
> To learn more about this process see this document <https://oauth.developers.visma.com/service-registry/documentation/overview>. Please explore Visma Developer Portal  documentation.

## Endpoints

Visma Connect endpoint details:

| Endpoint | URL |
| -------- | --- |
| Discovery | <https://connect.visma.com/.well-known/openid-configuration> |
| Authorization | <https://connect.visma.com/connect/authorize> |
| Token | <https://connect.visma.com/connect/token> |
| Userinfo | <https://connect.visma.com/connect/userinfo> |
| Endsession | <https://connect.visma.com/connect/endsession> |

## Visma Connect Token

Your application requests specific permission scopes and is granted an access token upon a user's approval.

There are two scenarios that are supported by Visma Connect:

- Interactive authentication of users, that must provide their credentials in a login form. That requires the authentication flow to use the *Authorization Code* or *Authorization Code with PKCE* grant type.
- Authentication of a service, using a client ID and a client secret. That requires the authentication flow to use the *Client credentials* grant type.

Once the authentication process has completed successfully, you can make API calls by providing the valid access token with each API request using the `authorization` header.


---

[View this page](https://docs.vismasoftware.no/vismanetapi/authentication/)


## In this section


- [Understanding OAuth](https://docs.vismasoftware.no/vismanetapi/authentication/oauth/index.md): Understanding OAuth2 for Visma API integration, including roles, tokens, scopes, grants, and necessary endpoints for secure resource access.