# Service accounts

### **What is a Service account?**

***

A service account (or daemon authorization) is a way to access web-hosted resources for server-to-server interactions that must run in the background, without immediate interaction with a user. They are useful for organizations that need to connect multiple accounts with Aurinko without interrupting end users to complete their account authentications.

### **Which providers does Aurinko currently support?**

***

Aurinko is currently able to onboard G Suite and MS Exchange service accounts as well as Office 365 "global admin" based app registrations. All Aurinko API's (email, calendar, contacts) support this.

### **Service Account Setup**

***

There are 3 main steps to using service accounts for authentication.

1. Your customer's IT Administrator does a one-time configuration of service accounts for their G Suite or Office 365 Organization, or MS Exchange server and shares the credentials with you. For more details please refer to the following articles:

* Setting up G Suite service account
* Setting up Office 365 daemon app registration
* Setting up MS Exchange service account

2. **G Suite or MS Exchange**: Upload the service account credentials to Aurinko from the Account/SERVICE tab:

<div data-full-width="true"><figure><img src="https://3933352743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0ua36KLVlbUN5bA2bgiq%2Fuploads%2FtPkvF9zwjZxMfJGkjVrc%2Fimage.png?alt=media&#x26;token=465e669b-f108-477f-83a1-3046296eb446" alt=""><figcaption></figcaption></figure></div>

3. **Office 365**: specify your daemon app registration details in the Application settings / Office 365 OAuth (Daemon):

<div data-full-width="true"><figure><img src="https://3933352743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0ua36KLVlbUN5bA2bgiq%2Fuploads%2Fz1x1j9rsLB487zVYiAGj%2Fimage.png?alt=media&#x26;token=f2fab0c6-ab3a-41cb-99df-f0a446681435" alt=""><figcaption></figcaption></figure></div>

Use the [service/daemon account authentication API ](https://apirefs.aurinko.io/#operation/authorizeDaemon)to add a new service account.

4. Use the [managed accounts API](https://apirefs.aurinko.io/#tag/Managed-accounts) to add user accounts that will use a service account for authentications. Your application can then use the <mark style="color:red;">`managed accounts`</mark> to access user data.