---
title: Requesting Passwords from AAPM
slug: kronpam-legacy-ui-reference-guide-3-5-0/requesting-passwords-from-aapm
description: Learn how to request passwords using the Kron PAM AAPM RESTful API. This document provides detailed information on API parameters, including account tokens, password expiration time, request comment, password retrieval options, and more. Explore example r
docTags: 
createdAt: 2022-07-31T14:08:44.000Z
---

The Kron PAM AAPM RESTful API should be used to request passwords. Each AAPM account must authenticate itself using its token, revealed after the account creation. AAPM account tokens can also be displayed on the AAPM Management page.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ywJ-tLrZZ4KHBBA7cvAVH_image.png "AAPM Account Token")

RESTful API parameters used for AAPM password checkout:

- **token**: The AAPM Account token.
- **
passwordExpirationInMinute**: Password expiration time
  Possible values are taken from the **aapm.show\.password.expiration.time.values** property in the System Config. Man. screen. If it is not defined, the possible values are taken from the **sapm.show\.password.expiration.time.values** property. The default value is **5m,30m,2h,24h**. Options are separated with commas (“,”), “m” stands for minutes, and “h” stands for hours.
- **
comment**: The password request comment.
- **
passwordChangeRequired**: Optional parameter with the default value set as **false**. If **true**, the password is changed before retrieval, otherwise, the password is changed after retrieval.
-
  **SapmAccountPath**: The SAPM account path of the linked SAPM Account.
-
  **SapmAccountName**: The SAPM account name of the linked SAPM Account.
-
  **responseType**: By default, it is the default response type (plain text for dynamic accounts). This value can also be set as “JSON” to receive the responses in JSON.
-
  **pin**: The PIN code sent to the application for PIN authentication.
- **tenantId: **If the multitenancy structure is active, it is specified from which tenant the request is sent.

***AAPM RESTful API Request Example***

***Basic Method***

The password is accessed as a result of the request sent with the correct parameters.

https\://single\_connect\_url:443/sc-aapm-ui/rest/aapm/password?passwordExpirationInMinute=30\&passwordChangeRequired=true\&comment=COMMENT\&token=c5838228-61ec-4b47-b72d-af0321db24b7\&sapmAccountPath=/test\&sapmAccountName=test\&responseType=JSON\&tenantId=HOST

***Pin Method***

**
The first request:**

**The first request:**

https\://single\_connect\_url:443/sc-aapm-ui/rest/aapm/password?passwordExpirationInMinute=30\&passwordChangeRequired=true\&comment=COMMENT\&token=c5838228-61ec-4b47-b72d-af0321db24b7\&sapmAccountPath=/test\&sapmAccountName=test\&responseType=JSON\&tenantId=HOST

**The second request:** (which is applicable for all Security Levels that require PIN authentication):

https\://single\_connect\_url:443/sc-aapm-ui/rest/aapm/password?passwordExpirationInMinute=30\&comment=COMMENT\&token=c5838228-61ec-4b47-b72d-af0321db24b7\&sapmAccountPath=/test\&sapmAccountName=test\&responseType=JSON\&pin=123456\&tenantId=HOST




***AAPM RESTful API Response Example***


x5#OKLE5 (the password)