API Security Overview

Customer administrators can allow specified users to access protected service or resources using access tokens. The following security mechanisms are supported:

• API keys—Authorized users such as administrators can create new API keys for a specific user (or service account) from the Juniper Security Director Cloud portal. They can also configure roles and access privileges for the user.

• OAuth 2.0—This option enables customers to leverage their existing Identity Providers (IdPs) to authenticate users, and assign successfully authenticated users and service accounts to a given role. Note that the roles assigned by the IdPs must also be created on Security Director Cloud. The supported IdPs are Okta and Entra ID (Azure AD).

To access the API for the Juniper Security Director Cloud, see Security Director Cloud API Reference.

You can access APIs for the following management functions:

• Identity and access management (IAM)

• PAC Manager

• Service Location

• Sites

While IAM APIs are available to both Juniper Security Director Cloud customers and Junos SRX Series firewall customers, PAC Manager, Service location, and Sites APIs are available only to Juniper Security Director Cloud customers.

To use an API key or OAuth token, add it to the HTTP header requests. For example, x-api-key: abcdef12345 and x-oauth2-token: abcdef12345.

To access this page, click Administration > API Security.