---
sourceDocument: Australia Sales and Order Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/order-management

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Sales and Order Management

ft:clusterId :

    - omgmt

bundleId :

    - omgmt

workflow :

    - Customer and Industry


---

# Authenticating CPQ API calls

# Authenticating CPQ API calls {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Secure CPQ API calls with admin API keys, JWT tokens, session cookies, or Google IdP for runtime and Admin tasks.

## Authenticating runtime API calls {#cpq-authenticating-api-calls__section_upy_5kf_rgc}

When using CPQ in a headless manner, you authenticate your configuration session by using a runtime client. To create a runtime client, navigate to the CPQ Admin UI, click Utilities in the sidebar, and then click Runtime Clients. From here, specify the origin of your call, whether it is an external URL or an origin
specified in the header of your call. You can also give your client an expiration date. After you save your client, you can copy the token and use it as the bearer token in other runtime API calls.

For more information on CPQ runtime calls, see [Intro to runtime API calls](https://servicenow-prod.fluidtopics.net/KwcDlqRaTMDk~lQO4yliIQ "Runtime, or buyside, APIs are used to create, update, and save configurations.").

## Authenticating admin API calls {#cpq-authenticating-api-calls__section_ngd_zkf_rgc}

There are four ways to authenticate your admin API calls:

* Admin API keysAdmin API keys are the recommended way of authenticating admin API calls. For information about setting up admin API Keys, see:

  [CPQ: admin API Keys](https://logikio.atlassian.net/wiki/spaces/CS/pages/1615331503).
* JWT tokenTo ensure tighter security for long-term admin API authentication, we leverage the Salesforce JWT web token. For steps to initialize this access flow, see:

  [Admin APIs: Authentication using a Salesforce-connected app](https://servicenow-prod.fluidtopics.net/qVra4ZpNI2LwQtTRXT89Gg "We recommend that you use admin API keys to authenticate admin API calls. An older method is documented here.")
* Session cookiesTo authenticate a short term admin session, you can leverage your browser's session cookie. Navigate to the cookies in your browser's console, and take the session cookie. Enter the cookie in your request
  header as a keyed pair: `"Cookie":"SESSION=<yourSessionCookie>"`

* Google IdPIf you are not connected to a Salesforce environment and choose not to use admin API keys, you can use Google IdP to authenticate. If you do not use Google IdP, open a support case or email support@logik.io to discuss
  options for admin API authentication.

  For information on setting up a Google IdP JWT token, see:

  [Setting up a Google IdP JWT Token for Headless admin API Authentication](https://logikio.atlassian.net/wiki/spaces/CS/pages/1614479620/Setting+up+a+Google+IdP+JWT+Token+for+Headless+Admin+API+Authentication)
{#cpq-authenticating-api-calls__ul_ok1_blf_rgc}