Configuration Checklist

Use the following checklist to verify that the OAuth configuration is complete:

• OAuth mobile application is activated.
• Domain URL, client ID, and resource scope have been securely recorded.
• Secondary audience is configured for the target Cloud EPM URL.
• Token refresh is enabled.
• EPM Integration Agent from the latest Cloud EPM release is installed.
• The agentparams.ini file contains OAUTH_ENABLED, CLIENT_ID, and RESOURCE_SCOPE, with no stored tokens or secrets.
• Initial OAuth token has been generated.
• Device code authorization is completed.
• EPM Integration Agent has been restarted successfully.
• Validation job completed successfully.

Final Validation: Verify that the RESOURCE_SCOPE value exactly matches the scope configured for the target Cloud EPM environment. Even a minor mismatch can prevent OAuth authentication from succeeding.