Our OpenAPI supports 3 of the standard OAuth Authorization protocols, all of which require manual action in the authentication flow.
To minimize manual input, we can recommend manually logging in once, and keeping the session alive by periodically requesting refresh tokens. Sessions can occasionally be ended by Saxo, for example when disclaimers change, so your application should detect this and notify you to log in again. See How do I get an access token that lasts longer than the 24H token?
Authentication without manual steps is available only for our institutional partners with Certificate Based Authentication (CBA). This authentication method is available for server-to-server integrations, and requires no manual input to authenticate users. Due to regulatory requirements, CBA unfortunately cannot be made available to retail or corporate clients, because the required disclaimers must be shown and accepted at login.
More Resources
GitHub - Examples on retrieving and refreshing the authentication token