Create an OAuth2 application

This page will help you create your first OAuth application

📘

Administrator permissions required

In order to perform the following steps, you are gonna need to be logged in Factorial with an administrator account. Administrator permissions can be granted to multiple users from the Company Settings section.

Choose your environment

Steps might be different depending on Environments: production and demo

Demo / sandbox environment

  1. Firstly, head over to your company repository of OAuth applications:
  1. Click on New applicationand follow the creation process.

Production environment

Developer partner or client?

Clients can create their own OAuth application in production. However, if you are a developer partner, or you want your integration to be used by more than one client, you need to get the official OAuth application for production

Client - single company use

  1. Firstly, head over to your company repository of OAuth applications:
  1. Click on New applicationand follow the creation process.

Developer partners - multiple company use

⚠️

Factorial requires an official OAuth application for multi company use

However, please fill up the form to get the official OAuth application for production

You will find a more precise guide here

OAuth application details

Redirect URI

The redirect URI the user will be redirected once it has granted permissions to your application to use information from Factorial's API.

🚧

Note about the Redirect URI

Kindly note that the Redirect URI in the Oauth Application dashboard MUST correspond with the Redirect URI in the body of your request for a new access token

Confidentiality

Indicates whether you can keep the client secret secure and inaccessible to any malicious actor.

Web and mobile applications are not considered secure, as a malicious actor could use debuggers to discover the client secret. Server applications with secure firewalls and protected access are considered secure.

Scopes

Scopes specify the exact level of access needed, ensuring OAuth tokens are restricted to only the required resources.

Here you should select the scopes your application will need to have access to. Refer to the scopes documentation to see the list of scopes available.