OAuth 2.0 for Integration Application Developers

OAuth 2.0 access is based on the authorization code grant flow for the generation of access tokens and refresh tokens, or the client credentials flow. The client credentials flow is a machine-to-machine flow for the generation of access tokens.

These alternatives are more straightforward than the three-step TBA authorization flow, because they don't require signing of requests.

For more information about the OAuth 2.0 code grant flow, see OAuth 2.0 Authorization Code Grant Flow.

For more information about the OAuth 2.0 client credentials flow, see OAuth 2.0 Client Credentials Flow.

Additionally, you can implement requests to manage your client credentials certificate. For more information, see OAuth 2.0 Client Credentials Certificate Rotation Endpoint.

General Notices