> ## Documentation Index
> Fetch the complete documentation index at: https://developer.suki.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authentication mechanisms and security questions for Suki platform integration

<Accordion title="What Is the Authentication Mechanism Used by Suki Platform?">
  We support

  * OAuth 2.0 ID token for public clients such as browsers, mobile devices etc.
  * Access token for confidential clients such as backend systems.
</Accordion>

<Accordion title="What Is the Webhook Authentication Mechanism?">
  We support HMAC

  <a href="https://www.okta.com/identity-101/hmac/" target="_blank">
    (Hash-based message authentication code)
  </a>

  for <Tooltip tip="A mechanism that allows Suki to send real-time event notifications to your application's server." cta="View in Glossary" href="/Glossary/w">webhook</Tooltip> authentication (Details can be shared)
</Accordion>

<Accordion title="How Will Errors Be Handled During JWT Token Failures?">
  Client systems cannot authenticate with Suki's platform when a <Tooltip tip="JSON Web Token. A compact, URL-safe means of representing claims used for authentication and information exchange." cta="View in Glossary" href="/Glossary/j">JWT</Tooltip> token fails. Suki returns standard HTTPS error codes. Refer to the{" "}
  <a href="/api-reference/authentication/login">login API</a>.
</Accordion>