Dynatrace SaaS Token Service issues, validates, and manages the token lifecycle. This includes
The following token types are issued by the token service relevant to IAM.
| Token type | Description | Who can generate | Expiry configurable? | Scope | Usage | Example use cases |
|---|---|---|---|---|---|---|
ID | User identity information | Users, applications | No | User identity attributes | Authentication | Verifying user identity, SSO, introspection API endpoints |
OAuth | OAuth 2.0 authentication, granting access to resources | Administrators | No | Defined by administrator at token creation | API access, third-party integrations | Grant external tools or scripts access to Dynatrace APIs with scoped user permissions. |
External access to the classic Configuration and Environment APIs, and downloads of OneAgent and ActiveGate installers | Environment users | Yes | Token scopes selected at token creation, limited to one environment | API access, OneAgent and ActiveGate installation | Call the Environment API from scripts, download OneAgent installers |