# Using The Credentials for HTTP Requests

> Workflow for using External Application credentials in HTTP requests for Document Understanding in Automation Suite, including obtaining an access token and using the AppId and AppSecret.

After creating the External Application, you can use it in your implementation. First, go through the Authentication procedure, using an Access Token. Here are the steps you need to follow:

* Get an access token for the `AppId` and `AppSecret` received when configuring the External Application.
* Use the access token as a request header.

## Get an Access Token

To access the application scope, confidential applications use the `clientID` and `clientSecret` in the call to the `POST https://cloud.uipath.com/identity_/connect/token` endpoint. This returns the access token.

Request example:

```
curl --data-urlencode "scope=Du.Digitization"
--data-urlencode "client_id={app_id}"
--data-urlencode "client_secret={app_secret}"
--data-urlencode "grant_type=client_credentials" https://cloud.uipath.com/identity_/connect/token
```

Response example:

```
{
"access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IjgwM",
"expires_in": 3600,
"token_type": "Bearer",
"scope": "Du.Digitization.Api"
}
```

## Use the access token

Use the access token by setting it as the `Authorization` header for each of the requests made to the REST APIs. The access token allows you to call the APIs that required the selected scopes, until the token expires (one hour). After that, you need to obtain a new access token using the `app_id` and `app_secret`.