PRODUCT · TOKEN GENERATOR
Stop fighting continuous OAuth refreshes. The Token Generator issues a long-lived SKY API token, hosted in your own Azure tenant — your data stays in your possession, and your users authenticate with their own Microsoft accounts.
HOW IT WORKS
Deployed in your tenant, authorized once a year, and used wherever your team already works.
The token server deploys to a small Azure App Service in your tenant. You provide the SKY client details unique to your organization — nothing runs on our infrastructure.
An admin authorizes the app as a Blackbaud SKY API administrator — only one person, once a year. Authorization happens in Blackbaud, and we maintain that token for all your entitled users.
Entitled users reach the token from Power BI, Power Platform, Excel, and Power Query using their Microsoft Entra account — seamlessly. Azure-deployed apps can authenticate via RBAC.
SECURITY & OWNERSHIP
The token server lives in your Azure subscription. Your SKY credentials, your token, your data — all under your identity and access controls, never ours.
Authentication uses Microsoft Entra and RBAC, so access to the token follows the rules you already enforce.
STABILITY
A long-lived token means no brittle refresh logic in your reports and apps. One annual authorization keeps every entitled user working.
Lightweight by design and built to keep running — so your dashboards and automations don’t break at 2 a.m.
WANT THE DETAILS?
Ask us for the Token Generator server data sheet and we’ll send the full technical spec — or we’ll walk you through a deployment in your own tenant. No pressure.
We’ll deploy the Token Generator in your tenant and hand you the data sheet — tell us about your Blackbaud setup.