Creating API client credentials

Create client credentials before requesting an API access token.

Before you start

Store the client secret in a secrets manager. The portal shows it only once.

Create credentials

Open Account Settings.
Select Credentials.
Enter a description that identifies the application using the credentials.
Select Create. It stays unavailable until you enter a description.
Copy the Client ID and Client Secret to secure storage.
Select Done.

What happens next

Use the client ID and client secret to request an API access token.

Create separate credentials for separate applications so that you can deactivate one integration without disrupting another.

Deactivate credentials

Open Account Settings.
Select Credentials.
Open the action for the credential.
Select Deactivate.
Select Deactivate in the confirmation dialog.

Warning: An application using deactivated credentials cannot request or refresh access tokens.

Troubleshooting

I closed the page without copying the client secret

Create new credentials. The portal cannot show the previous secret again.

An application using these credentials has been compromised

Deactivate the credentials immediately, create a replacement, and update the application. Do not put client secrets in browser code, source control, logs, or support requests.