generated: '2026-08-05' method: searched source: https://help.steno.com/steno-litify-integration docs: https://help.steno.com/steno-litify-integration note: 'Derived mechanically from OpenAPI is not possible — Steno publishes no specification. This profile is read from the only public documentation of Steno API credentials: the Steno-Litify Salesforce installation guide.' summary: types: - apiKey api_key_in: - unspecified oauth2_flows: [] scopes_published: false spec_backed: false schemes: - name: StenoApiKey type: apiKey in: unspecified description: 'A confidential, organization-scoped API key. Steno generates one key per customer organization on request — the Litify guide instructs the customer to send Steno their 18-digit Salesforce Organization ID, and Steno returns the key. The key and the Steno API URL are then stored in the Salesforce "Steno Configuration" Custom Metadata Type (separate records for Staging and Production), not in a Named Credential.' issuance: contact Steno (concierge@steno.com or the account manager) with the tenant organization ID rotation_policy: not published sources: - https://help.steno.com/steno-litify-integration - https://help.steno.com/litify/how-to-retrieve-your-18-digit-org-id environments: - name: Staging note: separate Custom Metadata record - name: Production note: separate Custom Metadata record end_user_authentication: note: These are the human sign-in controls for Steno's own applications, not API credentials. Recorded here because they are the only other published Steno auth surface. sign_in: https://steno.com/account/sign-in controls: - name: SAML Single Sign-On docs: https://help.steno.com/setting-up-saml-single-sign-on-sso - name: Multi-factor authentication scope: Firm Dashboard docs: https://help.steno.com/how-to-set-up-multi-factor-authentication-mfa-for-your-firm-dashboard - name: Role-based access control scope: Firm Dashboard docs: https://help.steno.com/how-to-enable-role-based-access-control - name: Firm Dashboard user roles and access control docs: https://help.steno.com/firm-dashboard-access-control gaps: - No public API reference documents the header or query parameter the API key travels in. - No OAuth 2.0, OpenID Connect, or scope model is published for the integration API. - '/.well-known/openid-configuration and /.well-known/oauth-authorization-server are 404 on steno.com and 403 on api.steno.com.' x-evidence: - url: https://help.steno.com/steno-litify-integration http_status: 200 observed: '"The API Key is a confidential and unique key for your organization. If you don''t have it yet, please send us your Organization ID, and we will generate the key for you." Configured via Setup > Custom Metadata Types > Steno Configuration.' - url: https://help.steno.com/setting-up-saml-single-sign-on-sso http_status: 200 - url: https://api.steno.com/.well-known/openid-configuration http_status: 403