Skip to main content
Set up Machine-to-Machine (M2M) authentication for automated integrations and CI/CD pipelines.
API clients have full administrative access. Role-based access control doesn’t apply to M2M tokens, and you can’t limit an API client to specific products or permissions. Anyone with the client secret can read and change every resource in your organization. See Access control for M2M tokens before you create a client.

SaaS Customers

Request Required SaaS customers cannot create M2M credentials themselves. Contact support@binarly.io to request API credentials for your organization.
When contacting support, please provide:
  • Your organization name
  • Intended use case (CI/CD, automation, integration)
You will receive:
  • Client ID - Your API client identifier
  • Client Secret - Your secure API key
  • Auth URL - Your authentication endpoint
Once you receive your credentials, proceed to M2M Authentication.

On-Premises Customers

On-Premises customers have full access to Keycloak and can create API clients directly.

Step 1: Navigate to Keycloak

  1. Open your Keycloak Admin Console: https://<YOUR_KEYCLOAK_HOST>/admin
  2. Log in with your administrator credentials. Keycloak Login Page

Step 2: Select Realm

  1. Near the top-left corner, click Manage realms
  2. Select BinarlyRealm from the list Select BinarlyRealm
  3. Verify you are in the correct realm Verify BinarlyRealm

Step 3: Create a Client

  1. Select Clients from the left-hand menu.
  2. Click Create client. Clients Create

General Settings

  • Client type: OpenID Connect
  • Client ID: Enter a descriptive ID (e.g., api-client or ci-cd-automation).
  • Name: (Optional) Enter a friendly name. Create Client - General Settings
Click Next.

Capability Config

  • Client authentication: On (This enables Client Credentials).
  • Authorization: Off (unless specifically required).
  • Authentication flow:
    • Set Service accounts roles only
Client Capability Config
Roles you assign to the client’s service account in Keycloak don’t restrict what the client can do in BTP. Every API client has full administrative access to your organization.
Click Next and then Save.

Step 4: Obtain Credentials

  1. After saving, select the Credentials tab at the top of the client details page.
  2. Copy the Client Secret. This is your secure key for API access.
Client Credentials
Store this secret securely. If lost or compromised, regenerate it immediately using the “Regenerate” button on this page.

Next Steps

Now that you have your Client ID and Secret, you are ready to generate an access token. Go to M2M Authentication ->