Autodesk Service Account — Setup Guide

Overview Use this guide to create and configure an Autodesk service account in MinuteView Console. This service account uses OAuth authentication with user login to access Autodesk Platform Services (APS) including:

• Mesh file viewing - View and access files stored in ACC, Fusion 360, and other Autodesk services directly within MinuteView's search interface
• Autodesk Construction Cloud (ACC) - Access projects, documents, and BIM data
• BIM 360 - Legacy project and document management
• Fusion 360 - Design and manufacturing data access
• AutoCAD Web - Cloud-based CAD operations
• Data Management API - File and folder operations for seamless integration
• Model Derivative API - 3D model processing and viewing capabilities

This service account enables MinuteView's Mesh module to display and interact with Autodesk-hosted files without requiring users to separately log into Autodesk services. Unlike traditional service accounts, this requires user authentication to establish the service connection, after which tokens are automatically managed and refreshed by MinuteView.

---

1) Create App in Autodesk Developer Portal

Register New Application

1. Sign in to Autodesk Developer Portal at https://aps.autodesk.com/
2. Navigate to My Apps → Create App
3. Configure application settings:
   • App Name: MinuteView Service Integration
   • App Description: MinuteView service account for automated APS access
   • App Type: Web App
   • I agree to the API Terms of Use: Check the box

Select Required APIs

Choose the Autodesk Platform Services you need:

Core APIs (Recommended)

• APS Web Services - Basic platform access
• Data Management API - File and folder operations
• Model Derivative API - 3D model processing and viewing

Additional APIs (As Needed)

• Construction Cloud API - ACC-specific features
• BIM 360 API - Legacy BIM 360 integration
• Design Automation API - Automated processing workflows
• Webhooks API - Real-time event notifications

4. Click Create App to generate the application

---

2) Configure App Settings and Callback URL

Collect App Credentials

From the app's Settings page, note:

• Client ID: your-client-id (public identifier)
• Client Secret: your-client-secret (keep secure)

Important: Callback URL Configuration

You will configure the callback URL in the next step after creating the service account in MinuteView Console, as MinuteView will provide the specific callback URL to use.

---

3) Create Service Account in MinuteView Console

1. Navigate to Console → Service Accounts
2. Click New to create a new service account
3. Configure the following settings:

Basic Configuration

• Name: Autodesk-ServiceAccount-Prod
• Service Account Type: Select Autodesk from the dropdown

App Credentials

• Client ID: Enter your Autodesk app's Client ID
• Client Secret: Enter your Autodesk app's Client Secret

Callback URL Display

After entering the credentials, MinuteView will display:

• Callback URL: https://your-minuteview-domain/api/autodesk/callback

Important: Copy this callback URL - you'll need it in the next step.

4. Do not click Save yet - you need to configure the callback URL first

---

4) Configure Callback URL in Autodesk App

Add Callback URL to Autodesk App

1. Return to Autodesk Developer Portal → My Apps → Your App
2. Navigate to Settings → General Settings
3. In the Callback URL section:
   • Click Add Callback URL
   • Enter the callback URL provided by MinuteView Console
   • Example: https://your-minuteview-domain/api/autodesk/callback
4. Click Save to update the app settings

Verify App Configuration

Ensure your app has:

• ✅ Client ID and Secret generated
• ✅ Required APIs selected and enabled
• ✅ Callback URL matching MinuteView's provided URL
• ✅ App status showing as Active

---

5) Complete Service Account Setup

Return to MinuteView Console

1. Back in Console → Service Accounts, verify your settings:

   • Client ID: Correctly entered
   • Client Secret: Correctly entered
   • Callback URL: Displayed and copied to Autodesk app

2. Click Save to create the service account (this saves the configuration without authentication)

Initiate User Login

3. After saving, you'll see a Login button
4. Click Login to begin the OAuth authentication process

OAuth Authentication Flow

5. You'll be redirected to Autodesk login page:

   • Enter your Autodesk credentials
   • Important: Use the credentials of the user whose account you want to use for the service
   • This user's permissions will determine what the service account can access

6. Grant Permissions: Authorize MinuteView to access your Autodesk data

7. You'll be redirected back to MinuteView Console

8. The service account will show Connected status with the authenticated user's name

---

6) Token Management

Automatic Token Handling

MinuteView automatically manages the OAuth tokens:

• Access Token: Used for API calls (expires in 1 hour)
• Refresh Token: Used to get new access tokens (long-lived)
• Automatic Refresh: MinuteView refreshes tokens before expiration
• Secure Storage: All tokens are encrypted and stored securely

User Context

The service account operates under the authenticated user's permissions:

• User Identity: The logged-in user's Autodesk account
• Access Rights: Limited to what that user can access
• Project Access: Only projects the user is a member of
• File Permissions: Based on the user's role in each project

---

7) Integration Usage

Mesh Module Integration

The primary use of this service account is enabling Mesh to view and access Autodesk files:

File Viewing in Mesh

• ACC Files: View Construction Cloud documents and models directly in Mesh search results
• Fusion 360 Files: Access design files and project data within MinuteView interface
• BIM 360 Files: Display legacy BIM 360 content in unified search
• File Previews: Generate thumbnails and previews for Autodesk files
• Metadata Display: Show file properties, versions, and project information
• Direct Access: Open files in their native Autodesk applications when needed

Seamless User Experience

• Single Sign-On: Users don't need separate Autodesk logins to view files
• Unified Search: Autodesk files appear alongside other content in Mesh results
• Context Preservation: Maintain project context and file relationships
• Permission Respect: Honor user's actual Autodesk permissions

Available Scopes and Capabilities

The service account provides access to:

Data Management

• Projects: List and access Autodesk projects for file discovery
• Folders: Navigate folder structures within Mesh interface
• Files: Download and display files from ACC, Fusion 360, etc.
• Versions: Access file versions and revision history

Model Services

• Model Translation: Convert files to viewable formats for Mesh display
• Thumbnail Generation: Create preview images for search results
• Metadata Extraction: Get model properties and attributes for indexing

User and Hub Information

• User Profile: Access authenticated user details for permission checks
• Hubs: List available hubs (teams/accounts) for project access
• Project Membership: Verify user access to specific projects and files

Workflow Integration

Additionally, use in MinuteView automation workflows:

• Download ACC Files - Retrieve files from Autodesk Construction Cloud
• Upload to ACC - Push files to Autodesk projects
• Get Model Data - Extract BIM model information for processing
• Process Designs - Trigger model derivative operations
• Sync Metadata - Keep file properties synchronized between systems

---

8) Security and Best Practices

User Account Selection

• Choose appropriate user: Select a user with necessary project access
• Service user recommended: Consider dedicated service user account
• Document ownership: Track which user account is used for the service
• Permission review: Regularly audit what the user can access

Security Considerations

• Client Secret Protection: Store securely, never expose in code
• Token Security: MinuteView handles secure token storage
• Access Monitoring: Monitor API usage and access patterns
• User Account Security: Ensure the authenticated user has strong security practices

Compliance and Auditing

• Access Logging: All API calls are logged with user context
• Permission Auditing: Regular review of user's Autodesk permissions
• Token Monitoring: Track token refresh patterns and failures
• User Changes: Update service if user leaves organization

---

9) Troubleshooting

Setup Issues

Callback URL Mismatch

• Verify callback URL in Autodesk app exactly matches MinuteView's provided URL
• Check for trailing slashes or protocol differences (http vs https)
• Ensure no extra characters or spaces in the URL

Invalid Client Credentials

• Double-check Client ID and Secret from Autodesk Developer Portal
• Verify app is in Active status, not Draft
• Confirm all required APIs are enabled for the app

OAuth Authorization Failed

• Check user has valid Autodesk account and appropriate permissions
• Verify user can access the intended projects and data
• Confirm browser allows redirects and doesn't block popups

Runtime Issues

Token Refresh Failures

• Check if refresh token has expired (rare but possible)
• Verify user account is still active and has access
• Re-authenticate by clicking Login button again

Access Denied Errors

• Confirm authenticated user has required project permissions
• Check if user's role allows the specific operation
• Verify project membership hasn't changed

API Rate Limiting

• Monitor API usage to stay within Autodesk limits
• Implement appropriate retry logic in workflows
• Consider distributing load across multiple service accounts

---

10) Maintenance and Monitoring

Regular Maintenance

• Monitor token health: Check for refresh failures
• User access review: Verify authenticated user still has appropriate access
• Permission auditing: Review what projects and data the service can access
• Security updates: Update Client Secret periodically

User Account Management

• Account changes: Re-authenticate if user credentials change
• Access updates: Monitor for changes in user's project access
• User departure: Replace service account if user leaves organization
• Permission changes: Update if user's role or access is modified

Performance Monitoring

• API response times: Monitor Autodesk API performance
• Error rates: Track failed requests and authentication issues
• Usage patterns: Analyze API call patterns and optimize workflows
• Cost tracking: Monitor API usage for cost management

---

11) Advanced Configuration

Multiple Service Accounts

You can create multiple Autodesk service accounts for different purposes:

• Production Account: User with broad project access
• Department Account: User with specific department access
• Testing Account: User with limited access for development
• Backup Account: Secondary user in case primary is unavailable

Environment-Specific Setup

Configure different accounts for different environments:

• Production: Live user with production project access
• Staging: Test user with staging environment access
• Development: Development user with test data access

---

Appendix — Configuration Examples

Production Configuration

Name: Autodesk-Production-ServiceAccount
Type: Autodesk
Client ID: your-production-client-id
Client Secret: [hidden]
Authenticated User: service.account@company.com
Status: Connected
Last Token Refresh: 2024-01-15 14:30:00

Department-Specific Configuration

Name: Autodesk-Engineering-ServiceAccount
Type: Autodesk  
Client ID: your-engineering-client-id
Client Secret: [hidden]
Authenticated User: engineering.service@company.com
Purpose: Engineering department projects only
Projects: Engineering Hub projects

Development Configuration

Name: Autodesk-Development-ServiceAccount
Type: Autodesk
Client ID: your-dev-client-id
Client Secret: [hidden]
Authenticated User: dev.test@company.com
Status: Connected
Environment: Development/Testing only

Callback URL Examples

Production: https://minuteview.company.com/api/autodesk/callback
Staging: https://staging-minuteview.company.com/api/autodesk/callback  
Development: https://dev-minuteview.company.local/api/autodesk/callback

This configuration enables comprehensive Autodesk Platform Services integration through user-authenticated service accounts, providing access to Construction Cloud, BIM 360, Fusion 360, and other Autodesk services with automatic token management and secure authentication flow.