Determine the Type of Integration
The first step before integrating with IROH is to determine what kind of integration you want to achieve. It depends on your needs and on some technical details.
The following is a list of questions to determine the type of integration you want to have:
Do I have my own user database? Do users log in to my application directly?
If the answer is yes, then the best way to integrate with IROH is to use an OAuth2 mechanism. IROH supports multiple OAuth2 Grants.
Is my app a website from which I control the server side?
If the answer is yes, then you should choose the OAuth2 Code Grant Integration with a confidential client: OAuth2 Authorization Code Grant Credentials (Web Applications).
Is my app a frontend only website?
If the answer is yes, then you should choose the OAuth2 Code Grant Integration with a public client: OAuth2 Authorization Code Grant Credentials (Web Applications).
Is my app a script, a plugin, a mobile client?
In this case, you should use an OAuth2 Client Grant: OAuth2 Client Credentials (scripts).
Is my app distributed into devices without a single public URL or on device with difficult input and/or now browser?
In this case, you should use the OAuth2 Device Grant: OAuth2 Device Grant.