Creating client_ID and client_secret parameters?

Question

So we need to provide an outside developer access to the REST API, not being a developer or having done this before I'm trying to figure this out.

So,using this page: https://support.sugarcrm.com/Documentation/Sugar_Developer/Sugar_Developer_Guide_7.7/Integration/Web_Services/v10/Exampl…

I can run the test script and it returns the tokens. I've found where you can create

OAuth keys but I'm not sure what I'm doing. Do you just randomly create the "Consumer key" and "Consumer Secret" or is there a way to generate them randomly?

How does the user/developer use these, I assume there also needs to be an actual account in SugarCRM for them to be able to access the REST API, or am I incorrect? Is there a way to allow them access just using Consumer Key Name/Consumer Key/Consumer Secret??

Just not sure, and the documentation seems more geared towards developers that have previous experience working within REST APIs.

Pete Johnstone · Accepted Answer

Yes, create them at random. Make the secret long.

They'll still need a username/password - the purpose is that usually if you use the same username and password on two machines, one machine will logout the other. This prevents you from being logged out if they use your authenticated username/password.