Using
Rally
Application Manager

Rally
Application Manager provides a set of authentication features for API and app developers and users.
The
Rally
Application Manager resides at a different URL than your
Rally
subscription: https://rally1.rallydev.com/login
Follow these steps:
  1. To access the
    Rally
    Application Manager, log in with your
    Rally
    username and password at the following URL: https://rally1.rallydev.com/login
    There are three tabs at the top of the page: Authorized Applications, API Keys, and OAuth Clients.
    OAUTH banner

Authorized Applications

This page lists the status of any standard or custom OAuth applications that you have authorized on your account.
These applications are authorized to access and retrieve data from your
Rally
account. Access can be revoked from this page. A revoked application can be re-enabled by entering your
Rally
credentials in the revoked application.
Currently, Flowdock is the only available standard integration.
Application Manager

API Keys

The API Keys page allows you to create keys that can be used to access your subscription data without using your username and password. However, any application using the API Key you generated will have access and be tracked as if you logged in with your username and password. API Keys do not require an additional
Rally
license because they are an extension of your own user license.
API Keys are strings that authenticate a user when accessing the
Rally
Web Services API. However, unlike a session token, the API Key does not expire. API Keys obey the permissions of the user that generated them—like using that user’s credentials. Keys are valid as long as the user desires, and can be deleted or reset.
API Keys will not authenticate if the user's account is disabled or deleted.
Subscription administrators may view, delete, and reset all active keys in a subscription from the API Keys page.
If API Keys are disabled at the subscription level, a user trying to set up a new API Key or edit an existing API Key will see an error message that states:
API Keys are disabled. Please contact your Subscription Administrator to enable this functionality
.
If API Keys are disabled:
  • The only action available on the API Key page is the ability to delete an existing API Key.
  • Existing keys will not work and will return a 401 error message.
Learn more.

Add OAuth Clients

The OAuth Clients page lets you integrate your external web app using
Rally
’s OAuth server.
OAuth credentials display for each of the applications that you have created. If the application is no longer operational, or the credentials have been compromised, delete the client or reset the client secret.
Application Manager
Follow these steps:
  1. Select
    Create New Client
    .
  2. Enter the Application Name and Callback URL.
  3. Follow the standard OAuth2 workflow to obtain an access token. An explanation of the workflow and sample apps can be found on GitHub.