# Get temporary credentials for ISV customers without an Amazon account
<a name="granting-temporary-credentials"></a>

For customers without an Amazon account, you can use entitlements in the same manner that you do for your customers with an Amazon account. Use the following procedure to get temporary Amazon credentials for your customers without an Amazon account. The API calls must be made in the home Region.

**To get temporary credentials to use in calling the License Manager API**

1. Call the [CreateToken](https://docs.amazonaws.cn/license-manager/latest/APIReference/API_CreateToken.html) API action to get a refresh token encoded as a JWT token.

1. Call the [GetAccessToken](https://docs.amazonaws.cn/license-manager/latest/APIReference/API_GetAccessToken.html) API action, specifying the refresh token that you received from `CreateToken` in the previous step, to receive a temporary access token.

1. Call the [AssumeRoleWithWebIdentity](https://docs.amazonaws.cn/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html) API action, specifying the access token that you received from `GetAccessToken` in the previous step, and the **AWSLicenseManagerConsumptionRole** role that you created, to get temporary Amazon credentials.

**To create a token from the Amazon License Manager console**

1. From the [License Manager console](https://console.amazonaws.cn/license-manager), navigate to the License details page for the specific license entitlement you want to use without an Amazon account.

1. Choose **Create token** to generate a temporary access token.
**Note**  
The first time you generate a temporary access token, you will be asked to create a service role so that License Manager can access services on your behalf. The following service role is created: `AWSLicenseManagerConsumptionRole`.

1. Download the `token.csv` file, or copy the token string when it is generated.
**Important**  
This is the only time you can view or download this token. We recommend that you download the token and store the file in a secure location. You can create new tokens at any time, up to the [service limit](https://console.amazonaws.cn/servicequotas/home/services/license-manager/quotas).