Skip to main content

OAuth2 Clients

The OAuth2 Clients view lets you register OAuth2 client configurations that the environment uses to obtain access tokens when calling external, OAuth2-protected services — for example from a service task, an outbound integration, or an agent connection.

OAuth2 client list​

The list shows each registered client with its Registration Key, Client ID, Grant type and Token URI.

The OAuth2 clients list

Adding an OAuth2 client​

Add OAuth2 Client opens the configuration form:

  • Registration Key — the unique key models and connections use to reference this client.
  • Client ID and Client Secret — the credentials issued by the authorization server (the client ID defaults to the registration key if left blank).
  • Issuer URI and Token URI — the authorization server; the token URI can be discovered from the issuer.
  • Scopes — the scopes the client should request.
  • Grant type — how tokens are obtained: Client credentials (the service authenticates as itself), or the on-behalf-of flows JWT bearer and Token exchange, which exchange the signed-in user's token so the downstream call runs as that user.

Adding an OAuth2 client

Existing clients can be edited or deleted from the list; deletion asks for confirmation.