Tokens
General Concepts
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
Access tokens
Authorized access is provided to third party apps via an Access Token.
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
Obtaining an access token
Authorization code flow
Authenticating to the Consumer API requires an External Application configuration to be created within Banno.
The back office administrator at your financial institution can do this for you in the External applications section of Banno People.
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
If you are a financial institution or working directly with a financial institution, you should work with the back office administrator at your institution to get appropriate access to Banno People.
If you are a fintech or other developer working without a financial institution, you are likely using the JackHenry.Dev developer portal. In this case, you will not have access to Banno People, however you will still have the ability to create and configure many aspects of your external application and plugin.
For more information on this, see our troubleshooting page.
Client credentials flow
Authenticating to the Admin API requires an External Application configuration to be created within Banno.
The back office administrator at your financial institution can do this for you in the Users & Groups section of Banno.
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
If you are a financial institution or working directly with a financial institution, you should work with the back office administrator at your institution to get appropriate access to the Admin API.
If you are a fintech or other developer working without a financial institution, you are likely using the JackHenry.Dev developer portal. In this case, you will not have access to the Banno Back Office.
Identity tokens
Authenticated identity information about a user is provided to third party apps via an Identity Token.
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
Refresh tokens
When an Access Token becomes invalid or expires, a new one can be obtained via a Refresh Token.
For more information about standards which apply across Jack Henry’s APIs, see the General Concepts for Tokens.
Obtaining a refresh token
A Refresh Token can be requested from the authentication server by including the appropriate scope when initiating the OAuth 2.0 Authorization Code Grant flow.
For example, Banno’s Consumer API uses the scope https://api.banno.com/consumer/auth/offline_access
to obtain a Refresh Token.
Guide on refresh tokens
See our Guide on Refresh Tokens in the Consumer API docs.