# Obtaining Infor ION API file

To establish a connection, you first need to create an **ION API file**. The file is generated under **Authorized Apps** tab inside **Infor ION API** component of **Infor IOS**. 

* Click on **+** sign (Add New App) to add a new app to the repository.

<figure><img src="https://1716064794-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIgl6sNaTky0iALxYWHH%2Fuploads%2F3tDJRAChtJqjDlBJ1U53%2Fimage1.png?alt=media&#x26;token=652ffaa7-5414-490f-bbb6-26823bdc1e2d" alt=""><figcaption><p>Authorized Apps inside Infor ION API</p></figcaption></figure>

* Provide a **Name** for an authorized application and choose its **Type**. Provide a **Description** and press **Save** to complete the setup.

<figure><img src="https://1716064794-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIgl6sNaTky0iALxYWHH%2Fuploads%2FfjVzWMKLPjOc0AxZn2xq%2Fimage2.png?alt=media&#x26;token=98f13699-a64e-4266-b754-1fa1465a83c8" alt=""><figcaption><p>Creating an authorized app</p></figcaption></figure>

* The saved application will now have an option to **Download Credentials**. Click on that.

<figure><img src="https://1716064794-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIgl6sNaTky0iALxYWHH%2Fuploads%2FSKSuz5NdreQSRCpm5TB2%2Fimage3.png?alt=media&#x26;token=1a9cf576-df9d-4220-a150-fd2de7428be8" alt=""><figcaption><p>Generating ION API File</p></figcaption></figure>

* Make sure to set **Create Service Account** and assign an appropriate service user from the list. Click on **Download** to download the ION API file.&#x20;

<figure><img src="https://1716064794-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIgl6sNaTky0iALxYWHH%2Fuploads%2FeFf8IpUU3EOHNQzXSlhA%2Fimage4.png?alt=media&#x26;token=4e7b7401-4dad-4a3a-9d87-fd219d4a0cbb" alt=""><figcaption><p>Downloading ION API File</p></figcaption></figure>

* Make sure that the chosen M3 user ID for **Service Account** has proper security roles assigned inside IFS (Infor Federation Services). \
  Make sure that either '**GRID-Administrator**' or '**GRID-RunAsM3User**' is ticked. These enable an authenticated user to start jobs on behalf of other users.&#x20;