# Urgent: Migrating shotgun\_api3 to Autodesk ID - Are Personal Access Tokens sufficient?

**URL:** <https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601>\
**Category:** Pipeline Integrations\
**Tags:** python-api\
**Created:** [September 30, 2021, 3:47pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601 "2021-09-30T15:47:11Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgb-ingenuity](https://avatars.discourse-cdn.com/v4/letter/m/94ad74/32.png) [@mgb-ingenuity](https://community.shotgridsoftware.com/u/mgb-ingenuity)\
**Post date:** [September 30, 2021, 3:47pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/1 "2021-09-30T15:47:11Z")

</div>

Our company has not found a way to definitively prove that personal access tokens, combined with legacy authentication as provided by the shotgun\_api3 library, are sufficient for continued pipeline functionality after Friday.

Would appreciate confirmation, as we’re operating on a hunch here and if we’re wrong… not good.

[Here’s the associated GitHub issue for context.](https://github.com/shotgunsoftware/python-api/issues/252)

---

<div class="post-metadata">

**Author:** ![Ricardo\_Musch](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/ricardo_musch/32/405_2.png) [@Ricardo\_Musch](https://community.shotgridsoftware.com/u/Ricardo_Musch)\
**Post date:** [September 30, 2021, 6:51pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/2 "2021-09-30T18:51:58Z")

</div>

As far as I’ve understood from @patrick-hubert-adsk 's documents, PAT’s are only required if your scripts are interacting with the Status of a HumanUser record.

So for example, if you have automated scripts that Activate or Deactivate SG accounts.

---

<div class="post-metadata">

**Author:** ![mgb-ingenuity](https://avatars.discourse-cdn.com/v4/letter/m/94ad74/32.png) [@mgb-ingenuity](https://community.shotgridsoftware.com/u/mgb-ingenuity)\
**Post date:** [September 30, 2021, 7:53pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/3 "2021-09-30T19:53:35Z")

</div>

According to the [response on the repo issue](https://github.com/shotgunsoftware/python-api/issues/252), PATs are apparently needed whenever you instantiate a Shotgun() instance.

---

<div class="post-metadata">

**Author:** ![patrick-hubert-adsk](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/patrick-hubert-adsk/32/257_2.png) [@patrick-hubert-adsk](https://community.shotgridsoftware.com/u/patrick-hubert-adsk)\
**Post date:** [September 30, 2021, 8:32pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/4 "2021-09-30T20:32:12Z")

</div>

Hi @mgb-ingenuity

API access indeed requires a PAT to be defined when authenticating with HumanUser credentials. Using API Use, a Script Name and API Key suffice.

It all depends on the type of work done… users interacting with the application, or a service synchronizing data.

This post describe how you can check that your PAT is indeed used, while still being in dual login mode: [When do I create a PAT before or after ShotGrid Migration - #7 by patrick-hubert-adsk](https://community.shotgridsoftware.com/t/when-do-i-create-a-pat-before-or-after-shotgrid-migration/12833/7)

Hoping this helps,

-Patrick

---

<div class="post-metadata">

**Author:** ![schicky](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/schicky/32/506_2.png) [@schicky](https://community.shotgridsoftware.com/u/schicky)\
**Post date:** [September 30, 2021, 8:42pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/5 "2021-09-30T20:42:02Z")

</div>

To be clear, a migrated user would use their Autodesk ID to log into SG web, but would need to use their legacy login/password + PAT to use any scripts authenticating with HumanUser credentials.

There is no way for the API to use their Autodesk ID credentials, right?

---

<div class="post-metadata">

**Author:** ![patrick-hubert-adsk](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/patrick-hubert-adsk/32/257_2.png) [@patrick-hubert-adsk](https://community.shotgridsoftware.com/u/patrick-hubert-adsk)\
**Post date:** [September 30, 2021, 9:06pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/6 "2021-09-30T21:06:50Z")

</div>

Hi @schicky

Autodesk Identity credentials can only be used in a Web Browser context. Not for command-line or API access.

Which is why we had to resort to offering an alternate way, using a PAT and the legacy login and passphrase.

-Patrick

---

<div class="post-metadata">

**Author:** ![schicky](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/schicky/32/506_2.png) [@schicky](https://community.shotgridsoftware.com/u/schicky)\
**Post date:** [September 30, 2021, 9:10pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/7 "2021-09-30T21:10:32Z")

</div>

Got it. Thanks!

---

<div class="post-metadata">

**Author:** ![Ricardo\_Musch](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/ricardo_musch/32/405_2.png) [@Ricardo\_Musch](https://community.shotgridsoftware.com/u/Ricardo_Musch)\
**Post date:** [October 1, 2021, 10:46am UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/8 "2021-10-01T10:46:08Z")

</div>

Hmm, how does this work for completely new SG accounts that did not exists before the ADSK ID migration?

Are those credentials the same as their ADSK ID?

---

<div class="post-metadata">

**Author:** ![patrick-hubert-adsk](https://sea1.discourse-cdn.com/shotgunsoftware/user_avatar/community.shotgridsoftware.com/patrick-hubert-adsk/32/257_2.png) [@patrick-hubert-adsk](https://community.shotgridsoftware.com/u/patrick-hubert-adsk)\
**Post date:** [October 1, 2021, 2:28pm UTC](https://community.shotgridsoftware.com/t/urgent-migrating-shotgun-api3-to-autodesk-id-are-personal-access-tokens-sufficient/13601/9 "2021-10-01T14:28:21Z")

</div>

Hi @Ricardo_Musch

For new users, they need to visit their ShotGrid user settings, and set an initial passphrase.

 ![Screen Shot 2021-10-01 at 10.22.22](https://global.discourse-cdn.com/shotgunsoftware/original/2X/7/74abf499b6b66a4b19630809f6e1c008f879d3de.jpeg)

Users should also note what is their login (usually their email, but it may vary. Admins can change that)

-Patrick
