**As** an integration
**I want to** obtain a client credential access token via API
**so that** I can save it for the SCIM client configuration.

**Acceptance criteria**

* In OpenProject a third party integration can obtain client credential access tokens via API by providing OAuth App ID and Secret.

* The Begin of the insertionmaxEnd of the insertion Begin of the deletion integration can optionally set anEnd of the deletion expiry date of the token Begin of the deletion when the token is obtained.

* The max expiry dateEnd of the deletion must be 1 year Begin of the insertionfrom creation.End of the insertion Begin of the deletion or lower.End of the deletion


**Technical notes**

* <br>


**Permissions and visibility considerations**

* Everyone with a valid OAuth App ID and Secret.

<br>


**Out of scope**

* Revoking of tokens?