generated: '2026-08-04'
method: probed
source: https://supportportal.hammerspace.com/.well-known/openid-configuration
applies_to: >-
  The Hammerspace customer support portal only. These are the Salesforce
  Experience Cloud platform scopes advertised by the identity provider that
  fronts supportportal.hammerspace.com. They are NOT scopes for the Hammerspace
  Anvil management REST API, which authenticates with a form login and a session
  cookie and exposes no OAuth scope surface at all. Recorded here because the
  document is genuinely served from a Hammerspace host and describes a real
  authorization surface — deliberately NOT wired as an OAuthScopes pointer in
  apis.yml, because doing so would credit Hammerspace with a scoped OAuth model
  for its data platform API that it does not publish.
schemes:
- name: supportportal-oidc
  issuer: https://supportportal.hammerspace.com
  platform: Salesforce Experience Cloud
  source: well-known/hammerspace-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://supportportal.hammerspace.com/services/oauth2/authorize
    tokenUrl: https://supportportal.hammerspace.com/services/oauth2/token
  - flow: implicit
    authorizationUrl: https://supportportal.hammerspace.com/services/oauth2/authorize
  response_types_supported: [code, token, token id_token]
  token_endpoint_auth_methods_supported: [client_secret_post, client_secret_basic,
    private_key_jwt]
  id_token_signing_alg_values_supported: [RS256]
scopes:
- scope: openid
  description: OIDC — request an ID token.
- scope: profile
  description: OIDC — basic profile claims.
- scope: email
  description: OIDC — email and email_verified claims.
- scope: address
  description: OIDC — address claim.
- scope: phone
  description: OIDC — phone_number and phone_number_verified claims.
- scope: offline_access
  description: OIDC — issue a refresh token.
- scope: refresh_token
  description: Salesforce alias for offline_access.
- scope: id
  description: Salesforce — access the identity URL service.
- scope: api
  description: Salesforce — access the platform REST/SOAP APIs on the user's behalf.
- scope: full
  description: Salesforce — full access to all data accessible to the user.
- scope: web
  description: Salesforce — access web pages via a browser session.
- scope: lightning
  description: Salesforce — access Lightning applications.
- scope: visualforce
  description: Salesforce — access Visualforce pages.
- scope: content
  description: Salesforce — access Files/Content resources.
- scope: chatter_api
  description: Salesforce — Connect REST (Chatter) API access.
- scope: chatbot_api
  description: Salesforce — Einstein Bots API access.
- scope: custom_permissions
  description: Salesforce — return the user's custom permissions.
- scope: forgot_password
  description: Salesforce — headless password-reset flow.
- scope: pwdless_login_api
  description: Salesforce — headless passwordless login flow.
- scope: user_registration_api
  description: Salesforce — headless self-registration flow.
- scope: interaction_api
  description: Salesforce — Interaction (Flow) API access.
- scope: wave_api
  description: Salesforce — CRM Analytics (Wave) API access.
- scope: eclair_api
  description: Salesforce — Einstein Vision/Language (Eclair) API access.
- scope: einstein_gpt_api
  description: Salesforce — Einstein GPT / models API access.
- scope: sfap_api
  description: Salesforce — Agentforce platform API access.
- scope: mcp_api
  description: >-
    Salesforce — Model Context Protocol API access on the Experience Cloud
    identity provider. This is a Salesforce platform scope, not a scope on
    Hammerspace's own MCP server.
- scope: scrt_api
  description: Salesforce — Service Cloud Real-Time (Messaging) API access.
- scope: pardot_api
  description: Salesforce — Account Engagement (Pardot) API access.
- scope: cdp_api
  description: Salesforce — Data Cloud API access.
- scope: cdp_query_api
  description: Salesforce — Data Cloud query API.
- scope: cdp_ingest_api
  description: Salesforce — Data Cloud ingestion API.
- scope: cdp_profile_api
  description: Salesforce — Data Cloud profile API.
- scope: cdp_segment_api
  description: Salesforce — Data Cloud segmentation API.
- scope: cdp_identityresolution_api
  description: Salesforce — Data Cloud identity resolution API.
- scope: cdp_calculated_insight_api
  description: Salesforce — Data Cloud calculated insights API.
- scope: data_cloud_user_claims
  description: Salesforce — Data Cloud user claims.
x-evidence:
  fetched: '2026-08-04'
  url: https://supportportal.hammerspace.com/.well-known/openid-configuration
  http_status: 200
  content_type: application/json;charset=UTF-8