An OAuth profile includes the grant type that the third-party OAuth provider needs to obtain access to the restricted resource.

Before you begin

Role required: admin

About this task

Procedure

  1. Open a third-party OAuth provider record.
  2. In the OAuth Entity Profiles embedded list, click Insert a new row and then enter a name for the profile.
  3. Right-click the Application Registry form header and select Save.
    The system creates the profile record.
  4. Click the name of the profile you created and then fill in the form fields.
    OAuth entity profile
    Field Description
    Name Enter a descriptive name.
    OAuth provider Verify the provider that is associated with the profile.
    Grant type Select the grant type:
    • Authorization code: The code that is granted to the client to obtain an access token, which is then used to obtain access to the resource. If you select this option, then you need an authorization URL (the URL of the authorization server).
    • Resource owner password credentials: The user name and password of the user that is trying to obtain access to the resource.
    • Client Credentials: The client ID and client secret, which are both used to get the access token. This method does not provide refresh tokens.
    • JWT Bearer: An authorization server validates a JWT token which enables identity and security information to be shared across security domains.
    • SAML2 Bearer: Generates the SAML2 assertion and then exchanges the assertion for the access tokens wit the provider.
      Note: For outbound request to SuccessFactors use the SAML2 Bearer as the Default Grant Type.
    Is default Select this option to make the profile the default option for the associated provider.
    Embedded list
    OAuth Entity Profile Scopes Specify the OAuth entity scope.
  5. Click Update.