Platform overview

The SIS API platform exposes secure HTTP APIs for customer and partner integrations.

Public API model

The public API surface is organized around standards and customer-contextualized access. Integrations authenticate with Azure Entra ID and receive responses based on the access configured for the calling application.

Security

Access tokens are issued by Azure Entra ID using the Client Credentials flow. SIS APIs validate the token audience, issuer, role, and customer access before returning protected data.

Versioning

API changes should be documented with migration guidance when they affect consumers. Breaking changes should be introduced through versioned endpoints or a clearly communicated transition path.

Events

Event notifications are planned for a later release. Until then, integrations should use the documented HTTP endpoints to retrieve current state.