Authorize an OAuth client
AI-generated summary
Genesys Cloud Resource Center provides procedures for authorizing OAuth clients through administrator-controlled access. Only approved Genesys Cloud administrators with OAuth > Client – Authorize permission can authorize OAuth clients; users lacking permissions receive an error message requiring administrator approval.
The authorization process accommodates three scenarios: (1) Known Client ID authorization requires navigating to Menu > IT and Integrations > Authorized Applications, entering the Client ID, and selecting required scopes before approval; (2) Unknown Client ID authorization involves launching the external application, logging in with administrator credentials, selecting desired scopes, and clicking Allow; (3) Built-in clients, enabled by default, require entering the Client ID from the OAuth page and can be configured to grant access to specific roles through the "Users that can use this application" field by adding roles.
For all authorization types, administrators must verify required scopes with application developers before approval. Built-in client access can be disabled by clicking Revoke Authorization, which removes access for all roles including administrators. The documentation references related resources including OAuth scope information, authentication versus authorization distinctions, and OAuth client management procedures.
- OAuth > Client – Authorize permission
Only an approved Genesys Cloud administrator can authorize an OAuth client. Users without permissions are shown a permissions error indicating an administrator is required to approve this application.
Select the authorization procedure that applies to you:
To authorize clients (known client ID):
- Click Admin.
- Under Integrations, click Authorized Applications.
- Click Menu > IT and Integrations > Authorized Applications.
- Click Authorize a client.
- In the Authorize Client dialog box, in the Client ID field enter the ID.
- Click Authorize client.
- In the Scope section, select the required scope.Note: If you have questions if a scope is required, check with the application developer before approving Scope.
- Click Approve.
To authorize clients (unknown client ID):
- Launch the external application.Note: The application might be within the Genesys Cloud menu structure, or completely independent of the Genesys Cloud application.
- When prompted to log in, use a Genesys Cloud administrator account.
- Select the desired scopes.Note: If you have questions if a scope is required, check with the application developer before approving the scope.
- Click Allow.
The built-in clients are enabled by default. To authorize clients (built-in clients):
- Click Admin.
- Under Integrations, click Authorized Applications.
- Click Menu > IT and Integrations > Authorized Applications.
- The Authorized Application page is displayed. Click Authorize a Client.
- In the Client ID field, enter the client ID for the built-in clients.
- Click Authorize Client. Note: You can view the list of Client IDs from the OAuth page. As an administrator you can enable access to the built-in client for all roles that require access to the client.
- In the Users that can use this application field, click Add Roles.
- In the Add Roles section, select the roles that require access to the application.
- Click OK.
- In the Scope section, define the scope of access to the client as required.
To disable clients, click Revoke Authorization. Doing this disables access to the application for all roles including administrators.
[NEXT] Was this article helpful?
Get user feedback about articles.