Enabling an Application to Use OAuth 2.0
You may have an existing application that authenticates through user credentials, which is not a safe authentication method. You can update this application to use OAuth 2.0.
To enable OAuth 2.0 for an existing application:
-
Go to Setup > Integration > Managing Integrations, and open the appropriate integration record for editing.
Important:OAuth 2.0 is only available for RESTlets and REST web services.
-
Check the Authorization Code Grant box, the Client Credentials (Machine to Machine) Grant, or both.
-
Chose a scope and check the appropriate box, RESTlets, REST Web Services, SuiteAnalytics Connect, or all of them.
-
Define the Redirect URI.
-
(Optional). Choose the Application Logo, Application Terms of Use, and Application Privacy Policy.
-
(Optional). Check the Public Client box, if you want to allow OAuth 2.0 public clients with this integration.
-
Select an option from the OAuth 2.0 Consent Policy list.
-
Click Save.
Important:The system displays the client ID and client secret only the first time you save the integration record. In cases where an application previously used user credentials as an authentication method, you must reset the client ID and client secret. In cases where the application used TBA, the client ID and client secret are not displayed. You can either use the same values as you used for TBA or reset them to get new values.
Warning:Resetting the client ID and client secret invalidates the previous client ID and client secret. This may invalidate the access token previously used as authentication method of the integration record.