• Login
  • Authorize URI
  • Redirect URI
  • Client Id
  • Scope
  • Token URI (PKCE)
  • Resource URI (User Info)

#Login

Each OAuth2 Client library requires a set of common input parameters.

The following is a list of the parameters you need to configure in your client library configurations.

#Authorize URI

Set it to your application's sandbox or live url followed by /authorize path.

• Checkout Dashboard > Applications.
• Select your application.
• Scroll down to the LIVE SSO URL OR SANDBOX SSO URL section.
• Copy the URL.

Example:

https://YOUR-LOGIN-DOMAIN/authorize

#Redirect URI

This is the URI to which the user will be forwarded after successfully logging in. Your OAuth2 Client Library will normally handle the rest of the operation.

#Client Id

Client Id should be set to one of the values from your backend API.

#Scope

Scope should be set to one of the values from your backend API.

It is possible to set more than one scope in this parameter separated by a whitespace. (ie. scopes: profile email)

#Token URI (PKCE)

Set it to your application's sandbox or live url followed by /token path.

Example:

https://YOUR-LOGIN-DOMAIN/token

You need to have PKCE enabled in your application's configuration in order for this to work. (Enabled by default)

• Checkout Dashboard > Applications.
• Select your application.
• Click the "Configure" button in the upper right corner of the application page.
• Open the "Security" tab.
• Toggle on the "PKCE Verification" switch.

#Resource URI (User Info)

Set it to your application's sandbox or live url followed by /userinfo path.