Authorize an OAuth client
AI-generated summary
Genesys Cloud provides comprehensive OAuth client authorization and authentication management capabilities that enable secure integration with third-party applications and services. Administrators with the OAuth > Client – Authorize permission can manage application access through multiple authorization procedures, including authorizing known client IDs by entering the ID and approving requested scopes, authorizing unknown client IDs through external application login prompts using admin credentials, and enabling built-in clients such as Android Collaborate that are configured by default. The authorization workflow requires accessing the Admin panel, navigating to Integrations > Authorized Applications, entering the client ID, selecting required scopes in consultation with application developers, and defining user access by assigning specific roles. Administrative functions enable granular access management through role-based access control, allowing administrators to assign roles that require application access and revoke authorization to disable client access across all users when necessary. The platform supports OAuth scope enforcement, which restricts client access permissions to only the necessary authorization levels required for their intended operations. Administrative capabilities also include the ability to create OAuth clients, view authorized OAuth clients, manage OAuth client configurations for specific integrations such as ServiceNow, and perform administrative functions such as viewing, editing, deleting, or restoring OAuth clients within the organization. Scope approval and role-based access control serve as core security features that enable controlled integration of external and built-in applications while maintaining organizational security standards.
- OAuth > Client – Authorize permission
Only an approved Genesys Cloud administrator can authorize an OAuth client. Users without permissions are shown a permissions error indicating an administrator is required to approve this application.
Select the authorization procedure that applies to you:
To authorize clients (known client ID):
- Click Admin.
- Under Integrations, click Authorized Applications.
- Click Menu > IT and Integrations > Authorized Applications.
- Click Authorize a client.
- In the Authorize Client dialog box, in the Client ID field enter the ID.
- Click Authorize client.
- In the Scope section, select the required scope.Note: If you have questions if a scope is required, check with the application developer before approving Scope.
- Click Approve.
To authorize clients (unknown client ID):
- Launch the external application.Note: The application might be within the Genesys Cloud menu structure, or completely independent of the Genesys Cloud application.
- When prompted to log in, use a Genesys Cloud administrator account.
- Select the desired scopes.Note: If you have questions if a scope is required, check with the application developer before approving the scope.
- Click Allow.
The built-in clients are enabled by default. To authorize clients (built-in clients):
- Click Admin.
- Under Integrations, click Authorized Applications.
- Click Menu > IT and Integrations > Authorized Applications.
- The Authorized Application page is displayed. Click Authorize a Client.
- In the Client ID field, enter the client ID for the built-in clients.
- Click Authorize Client. Note: You can view the list of Client IDs from the OAuth page. As an administrator you can enable access to the built-in client for all roles that require access to the client.
- In the Users that can use this application field, click Add Roles.
- In the Add Roles section, select the roles that require access to the application.
- Click OK.
- In the Scope section, define the scope of access to the client as required.
To disable clients, click Revoke Authorization. Doing this disables access to the application for all roles including administrators.
[NEXT] Was this article helpful?
Get user feedback about articles.