Skip to main content

Third-party app for owner-operators: OAuth/delegated access, or a service-account user?

richardprater
Original Poster

a driver-facing app for owner-operators and small fleets. Geotab is one of the ELD providers my users already run, and I want the app to read their data with their permission so they never type anything twice.
I've registered a demo database, Demo_runninonmt_v2, and read it through the API. Four questions the data couldn't answer:
1. Authorization. Your SystemSettings lists allowedUserAuthenticationType: "BasicAuthentication, SAML". When the customer is a one-truck owner-operator who owns his own database, is there an OAuth or delegated-access flow a third-party app should use? Or is the expected pattern a dedicated service-account user whose credentials the customer shares with us? If it's the service account, what's the narrowest security clearance that can still read Device, Trip, LogRecord, FuelTransaction, FuelTaxDetail and DutyStatusLog?
2. Distance units. Your speedingTrigger values (113, 129, 145) tell me API speeds are km/h even when the user's display is imperial. Is Trip.distance always kilometres too, whatever the user's isMetric setting is? Every trip in the demo reads 0, so I can't confirm it from the data.
3. FuelTaxDetail. The type name is accepted but comes back empty, and the demo shows enableFuelProcessing: false. What does a FuelTaxDetail row carry? Is it distance split by jurisdiction? Is that distance taken from GPS position or from engine odometer? I need to tell the driver which one his number came from.
4. A US heavy-truck demo dataset. The "Vehicle with tachograph" option produced a European fleet, and the "Passenger" option produced Corollas with synthetic trips. Is there a demo configuration that gives US heavy trucks with real trip distances, fuel transactions and duty-status logs?
Finally, is there an Integration or Marketplace Partner track for an app like this? I'd rather start on the right track than move onto it later.
Thank you

Join the conversation

You need to be logged in to reply to this post and participate in the Geotab Community discussions.

3 Replies

It depends on what you mean by having the app "read their data". Given that you have OO's who could have their own database, I think OAuth/SAML is probably the simplest option to eliminate the need to have them set up accounts and share credentials with you. If your app or integration will ever need to take administrative actions, manage multiple users or do anything else the users themselves can't do, then you'd probably need something like service accounts.

richardprater
Original Poster

@DarenPorter-1148 Thank you Daren, that helps. We only ever read (trips, GPS, fuel, fuel tax, duty status), so no admin actions or service accounts.
On OAuth: our demo database's SystemSettings reports allowedUserAuthenticationType as "BasicAuthentication, SAML", with no OAuth. Is there a documented OAuth authorization flow a third-party app can use to get read access to a customer's MyGeotab database? If so, could you link the docs? If not, is a MyGeotab Add-In the recommended path so the driver never shares a password with us?
Still hoping someone can answer the other three from the original post:

  1. What unit is Trip.distance in (km or miles)?
  2. What does FuelTaxDetail carry? Is it jurisdiction-split distance for IFTA?
  3. Is there a US heavy-truck (Class 8) demo dataset? Ours generates Corollas with zero trip distance.


@richardprater Geotab supports SSO via SAML 2.0. Here are the docs: MyGeotab SAML 2.0 SSO Integration Guide

For your other questions:

  1. `trip.distance` is in km: https://developers.geotab.com/myGeotab/apiReference/objects/Trip/index.html
  2. Check out the FuelTaxDetail documentation: https://developers.geotab.com/myGeotab/apiReference/objects/FuelTaxDetail/index.html
  3. This one I'm less sure of. I know you can select demo vocations and demo vehicles, but I don't know that they cover your specific requirements. This document might help you: https://support.geotab.com/help/mygeotab/access-and-administration/getting-started/database-setup#ariaid-title4
Still have questions?