Explore our resources and get started

Check our quick start and technical guides, find documentation on security best practices, access tokens, OAuth2, error handling, and more.

Check out our glossary for a precise definition of Orange Developer notions

All about APIs - Glossary

All
Access token
Authentication
Credentials
Identity & Authentication
M2M
Oauth2
Security
SMS
U2M

OAuth M2M in a nutshell

Discover how to access protected Orange APIs resources using OAuth M2M (i.e. client_credentials grant type), provided with sample codes

Best practices for API error handling and troubleshooting

Orange relies on OAuth 2.0 authorization protocol to secure the access to protected resources. As such, Orange APIs return OAuth-based errors. Learn about error cases, error codes and request IDs to be managed by your application.

OpenID Connect 1.0

OpenID Connect allows client applications of all types (including Web-based, mobile and JavaScript), to request and receive information about authenticated sessions and end-users.

How to start with Orange Developer

Orange Developer features a catalog of APIs as well as an embedded and streamlined API subscription and account creation process. Learn how to get started on the Orange Developer portal.

Authentication SMS OTP Consent

Orange implements SMS OTP Authentication and Consent. Discover how to create a login and the encoding process in this guide

OAuth U2M in a nutshell

Discover how to access protected Orange APIs resources using OAuth U2M (i.e. client_credentials grant type), with sample codes

3-Legged OAuth2.0 flow step by step

How to access protected Orange APIs resources using “3-legged” OAuth (i.e. authorization_code grant type)

How to migrate to multi-subscription applications

To improve the security on our APIs, all applications that used only one set of credentials for API subscription must now handle several sets of credentials. This article presents how to handle this change.

Orange Developer and Fraud prevention

Discover how the Orange Developer platform and our APIs can help you prevent and protect your apps against fraud (access fraud, application fraud, …).

Introduction to OAuth 2.0 protocol

OAuth 2.0 defines a protocol for securing application access to protected resources, which are accessed through REST APIs. With this guide, discover an overview of OAuth 2.0 roles, authorization grant types and M2M and U2M flows.

2-Legged OAuth flow step by step

Step-by-step description of how to access protected Orange APIs resources using ‘2-legged’ OAuth (i.e. client_credentials grant type)

Client security measures, good practices for a secure integration of Orange APIs

Various security measures need to be taken into account when implementing clients that integrate Orange APIs. Discover these important practices.