Personal Access Tokens (PAT)

Personal Access Tokens (PATs) provide non-interactive authentication to OpenText Dimensions CM without using passwords. Pulse users can define PATs associated with their user profile. All tokens start with "mfpu_" followed by a unique hash.

PATs are used as a password replacement (userID is provided as usual). They are time limited and can be revoked. PATs work with any OpenText Dimensions CM authentication method, including both traditional and SSO-based authentication.

Supported clients

PATs enable non-interactive logins to OpenText Dimensions CM for tools and scripts that cannot use interactive login flows. Users must not disclose account passwords and can log in without interacting with login wizard from:

  • Automated scripts
  • APIs
  • Git client
  • DMCLI (command-line interface)
  • DM utility

Note: PAT authentication is NOT allowed from GUI clients: Desktop Client, Web Client, Administration Console, BWS, Windows Explorer, or Rich IDEs.

DMPOOL checks ClientID (PCCLIENT, MERGE_WIZARD, DMCLI, DM, INETORADMIN, PULSE) and on basis of ClientID, login to PAT will be allowed or restricted.

Back to top

Create and generate a PAT

To create and generate a PAT:

  1. Create users in LDAP and OpenText Dimensions CM (not applicable for dmsys).

  2. Log in to PulseUno.

  3. From the main menu, select Preferences.

  4. In the Preferences menu, select Personal Access Tokens.

  5. Click the + (plus) button to create a new PAT.

  6. In the PAT creation form, configure:

    • Title: A descriptive name for the token
    • Expiration: The expiration period (for example, 30 days)
    • Scopes: The access permissions for the token:
      • Git push - allows pushing to a git repository the user has access to
      • Git pull - allows pulling from a git repository the user has access to
      • Vault deploy - allows writing artifacts to a vault the user has access to
      • Vault download - allows reading artifacts from a vault the user has access to
      • Dimensions CM Access - allows access to OpenText Dimensions CM via command line tools

  7. After the PAT is generated, store it in a safe location. The token will not be displayed again.

    Note: If the Dimensions CM Access scope is not available, the pat.type.cm.allowed property must be enabled in PulseUno Administration System Properties.

Back to top

Configure PAT privileges

To configure PAT privileges:

  1. Log in to the Administration Console.

  2. Navigate to Administration > Privileges.

  3. Under Other Admin, click Manage Personal Access Token.

  4. Grant permission to the user by assigning the appropriate role.

Back to top

See also: