Integration prerequisite steps when using OAuth0 2.0

Auth0's OAuth 2.0 (3LO) Authorization Framework allows external applications and services to access ServiceDesk Plus product APIs on a user's behalf. OAuth 2.0 (3LO) apps are created and managed in the developer console.Required fields to connect to ServiceDesk Plus and get an access token are as follows:

• client_id
• client_secret
• scope
• state
• redirect_url
• grant_type
• response_type

Field	Description
client_id	Set this to the Client ID for your app. Find this in Settings for your app in the developer console.
client_secret	Set this to the Client Secret for your app. Find this in Settings for your app in the developer console.
scope	Set this to the desired scopes: Separate multiple scopes with a space. Only choose from the scopes that you have already added to the APIs for your app in the developer console. You may specify scopes from multiple products.
state	Set this to a value that is associated with the user you are directing to the authorization URL, for example, a hash of the user's session ID. Make sure that this is a value that cannot be guessed. You may be able to generate and validate this value automatically, if you are using an OAuth 2.0 client library or an authentication library with OAuth 2.0 support.
redirect_url	Set this to the callback URL configured in Authorization for your app in the developer console.
grant_type	Set to authorization_code as you are requesting an authorization code.
response_type	Set to value to code.
access_type	Enter access_type as online or offline. If you want to generate the refresh token, set this value as offline.

Next, see Configuring the ServiceDesk Integration.