Authentication

Your ICR App can authenticate as itself or as an app installation.

Authenticate as an ICR app

Your app should authenticate as itself when it needs to generate an installation access token. An installation access token is required to authenticate as an app installation. Your app should also authenticate as itself when it needs to make API requests to manage resources related to the app. For example, when it needs to list the organizations where it is installed. For more information, see "Authenticating as an ICR App".

Authenticate as an app installation

Your app should authenticate as an app installation when you want to attribute app activity to the app. Authenticating as an app installation lets your app access resources that are owned by the organization that installed the app. For more information, see "Authenticating as an ICR App installation."