Platform
OAuth
OAuth is an authorization framework that lets an application receive limited access to another service without collecting the user’s password.
OAuth is an authorization framework that lets an application receive limited access to another service without collecting the user’s password.
What OAuth means
OAuth is an authorization framework that lets an application receive limited access to another service without collecting the user’s password.
OAuth separates the application requesting access, the user or resource owner, the authorization server, and the protected API. Access is represented by tokens with defined scope and lifetime. OAuth is authorization; identity layers such as OpenID Connect address authentication.
How it works
The application redirects the user to the service’s authorization flow, receives an authorization grant, and exchanges it for an access token. The token is sent to approved API endpoints. Refresh, revocation, scope, storage, and rotation must be handled securely.
Practical use cases
Connecting a CRMCRMA CRM is the system used to manage leads, contacts, accounts, opportunities, activity, ownership, and follow-up. account to an agent platform
Granting limited calendar access
Revoking an integration without changing the user’s password
Request the narrowest scope needed and make connection state visible. A long-lived token with broad permissions is a larger operational risk than a carefully scoped integration.
Frequently asked questions
Why does OAuth matter?
Request the narrowest scope needed and make connection state visible. A long-lived token with broad permissions is a larger operational risk than a carefully scoped integration.
Does OAuth mean the connected app never stores secrets?
It avoids collecting the user’s password, but the application may still need to protect client credentials, access tokens, refresh tokens, redirect URIs, and state.
Source: The IETF OAuth 2.0 specification.
Related concepts: crm integrationCRM integrationA CRM integration connects an agent or communications platform with a CRM so the systems can exchange records, events, and actions., system of recordSystem of recordA system of record is the authoritative source for a defined category of business data., webhookWebhookA webhook sends event data from one system to another through an HTTP request when a defined event occurs., workflowWorkflowA workflow is a defined sequence of steps, decisions, actions, delays, and outcomes used to complete a business process..