Create an OAuth2 application
This page will help you create your first OAuth application
Administrator permissions requiredIn order to perform the following steps, you are gonna need to be logged in Factorial with an administrator account. Administrator permissions can be granted to multiple users from the Company Settings section.
Choose your environment
Steps might be different depending on Environments: production and demo
Demo / sandbox environment
- Firstly, head over to your company repository of OAuth applications:
- Click on
New applicationand follow the creation process.
Production environment
Developer partner or client?
Clients can create their own OAuth application in production. However, if you are a developer partner, or you want your integration to be used by more than one client, you need to get the official OAuth application for production
Client - single company use
- Firstly, head over to your company repository of OAuth applications:
- Production (clients internal use only)
- Click on
New applicationand follow the creation process.
Developer partners - multiple company use
Factorial requires an official OAuth application for multi company use
However, please fill up the form to get the official OAuth application for production
You will find a more precise guide here
OAuth application details
Redirect URI
The redirect URI the user will be redirected once it has granted permissions to your application to use information from Factorial's API.
Note about the Redirect URIKindly note that the Redirect URI in the Oauth Application dashboard MUST correspond with the Redirect URI in the body of your request for a new access token
Confidentiality
Indicates whether you can keep the client secret secure and inaccessible to any malicious actor.
Web and mobile applications are not considered secure, as a malicious actor could use debuggers to discover the client secret. Server applications with secure firewalls and protected access are considered secure.
Scopes
Scopes specify the exact level of access needed, ensuring OAuth tokens are restricted to only the required resources.
Here you should select the scopes your application will need to have access to. Refer to the scopes documentation to see the list of scopes available.
Updated 16 days ago
