Skip to main content

Get Support
Have a question? Let's get you an answer!

How Do I...? Troubleshooting Code & Webhooks Developer Zone

Other Help Resources
Wait, there's more! Check out these Community sourced spaces for additional resources.

Zapier Help Center Hire an Expert

Learning Resources
All of our best learning resources can be found here.

Featured Articles Show & Tell Zapier's products AI Hub Zapier Tools Hub

Share your knowledge
Give back to the Community by sharing your automation wins and helping to answer questions.

Share your success See unanswered questions User Groups

Other Learning Resources
Some of our favorite additional ways to upskill your Zapier knowledge.

Zapier Learn Zapier Blog Zapier Webinars

Product Updates
Check out what is new and upcoming with Zapier with our regular product updates.

Product Updates

Early Access Program
Want to join Early Access? Learn more here.

Authentication

Questions about setting up authentication for integrations on the Zapier platform.

  • 66 Topics
  • 100 Replies
66 Topics
J
Justin5StarNew
asked in Authentication
How to fix the expired connection issue between Highlevel and my CRM

I’m trying to connect my highlevel account to another CRM so leads are created automatically in my CRM.  It keeps on telling my connection is expired and I need to reconnect it.  I’ve tried reconnecting multiple times, I also renewed my API on my highlevel account and this still did not work.  What am I doing wrong? 

122
S
14 days ago
S
SHomeierNew
asked in Authentication
OAuth2 with Keycloak fails after 2nd RefreshAccessToken Call

Hello together, we are currently facing the problem that API access with new access token fails after token was refreshed the second time. For better testing we use very short timespan for the access token in Keycloak: The initial OAuth2 Flow /auth endpoint is triggered succcessfully and the first token retrieved also is accepted by our API.Then after 1 Minute (when the token expired) we get a 403 from API and trigger a RefreshAccessToken call with scope “offline_access”.This successfully returns a new token which is accepted by our API.Again, another minute later, our API returns 403 and RefreshAccessToken call is triggered.This time our API refuses the Token with 403 and Zapier Zap failed with “Please reconnect your account”.After debugging the Token from our API we noticed that this was an old token which expired already. It seems Zapier did not use the new access_token but reused the old one.Maybe I did somethring wrong in the code on how to return the new token (we use zapier-plat

120
S
24 days ago
M
MarketingSafa
asked in Authentication
WordPress app authentication failed

Hi,I have been using the WordPress API Request (Beta) zap without any issues for the last 3-4 months. However, the last week the connection failed. I have tried to reconnect the WordPress app in “My connections”, but I have been getting the following error since then:To rule out that it was not an error of the connected website, I have tried to connect other websites made with WordPress, with different configurations (themes, plugins...), and in all tests I get the same authentication error without any specific message.

261
M
1 month ago
H
HauzdNew
asked in Authentication
[Auth] Refresh token is added as url query parameter

Hi all, we’re facing the issue that we want to do the auth with Cognito, in code mode we have: const options = {  url: 'https://auth.hauzd.app/oauth2/token',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded'  },  body: {    'client_id': 'x',    'grant_type': 'refresh_token',    'refresh_token': bundle.authData.refresh_token  },  removeMissingValuesFrom: {    'body': false,    'params': false  },}return z.request(options)  .then((response) => {    if (response.id_token) {      return response.id_token    }    return false  }); but it adds the refresh_token as query parameter, which causes a “invalid_grant” error.It is a “Session auth”. We tried also “Api Key Auth” but it is the same… There is no way to avoid refresh_token to be put as query parameter.Basically the issue is that the refresh_token should not be sent as query param but there is no way to remove it from there. Please help. Thanks in advance!Regards,Gonzalo.

221
MiguelC.
1 month ago
A
Anything-Helps.orgBeginner
asked in Authentication
How to Integrate a Platform's UI Without an Authorization URL

I’m trying to create a private integration in the Platform UI for the USPS Public API.  Details can be found at https://github.com/USPS/api-examples?tab=readme-ov-file#oauth-token. You’ll note they only have a /token url (step 2).  There’s no /auth url (step 1) present nor is it required to get an auth_token.  Any ideas for how to get around this?

241
MiguelC.
1 month ago
C
CyrillvwNew
asked in Authentication
Integration: how can i use data from the test request in actions and triggers as default value

We currently building a integration using the UI platform. Everything seems to work fine so far.At thing we did not found tho is the following:Our test request returns some kind of data which will be used for the connection id, which works fine. But we would like to use some of this data as well for default field values in actions and maybe also triggers. Is there even a way to do it or do we have to use dynamic dropdowns for all?Thanks for a answer already 

141
MiguelC.
1 month ago
A
Andrew504Beginner
asked in Authentication
Zoom Connection Scope

I’m trying to utilize Custom Actions and/or API Requests Beta to send messages using Zoom’s Team Chat API.When I run test either one, I receive this error message:Invalid access token, does not contain scopes:[chat_message:write, chat_message:write:admin].It seems that the default scope included for the Zoom connection provides limited scopes into the API, so we’re not able to fully leverage all the endpoints. Please consider increasing the scope.

161
Sebastian M
1 month ago
B
Brandon_AdamsNew
asked in Authentication
Error with OAuth Integration and Scheduler Email in Mold Ninja using Zapier

I am facing with the integration of our application, Mold Ninja, into Zapier.We have deployed Mold Ninja to Zapier and set it up using OAuth v2. We successfully created a Zap to schedule meetings between:The user who logs into our app (acting as the scheduler).Other email IDs added as invited users.However, I encountered a problem during testing. When I attempt to schedule a meeting via Mold Ninja other users(not the same mail id with which zap was created), the integration only works if the "from" email address matches the one used to create the Zap in Zapier (the original scheduler email). It does not work with any other email addresses, even though those users are logged into Mold Ninja and are expected to act as schedulers.I would appreciate your guidance on resolving this issue. Is there a way to configure the Zap or our app’s OAuth implementation so that meetings can be scheduled by any valid logged-in user, instead of restricting it to the original scheduler email?Thank you in a

11
JammerS
1 month ago
V
Vitor CoimbraNew
asked in Authentication
Oauth integration

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

230
V
1 month ago
P
plakinBeginner
asked in Authentication
Invalid redirect_uri in ServiceNow oauth

I’ve searched around the community as well as the internet and cannot find what redirect_uri Zapier wants from ServiceNow. I’m attempting to use the default https://<instance>.service-now.com/oauth_redirect.do, but Zapier says this URI is invalid. To be clear, this redirect works fine with multiple other integrations. I could use the username and password to bypass this, but the entire point of this is to test an integration for my company and if I can’t get OAuth working, that’s a deal-breaker and my PoC spike will be over before it started.Any help is appreciated. Thanks!

827
P
1 month ago
V
Vitor CoimbraNew
asked in Authentication
Oauth integration

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

201
Troy Tessalone
1 month ago
Z
ZappitoNew
asked in Authentication
MS Dynamics - Authentication

Hi,Is it possible to do an authentication for a Zap between Meta and MS Dynamics other than via Oauth (aka using an email address)?My IT team is quite nervous about using an email-based auth! Thanks a lot, Zappito

221
Troy Tessalone
1 month ago
jake.reworx307
jake.reworx307Beginner
asked in Authentication
Google OAuth 2.0 Re-authentication for Each Password Change

Hey all, Is it possible to bipass the need to reauthenticate each time you reset your google account password? I see this help article but wasn’t sure about an App password between google and zapier. https://support.google.com/a/answer/6328616?hl=en&ref_topic=10021546&fl=1&sjid=8876137320170281140-NC#zippy=%2Chow-does-this-change-impact-applications-using-an-app-password-if--step-verification-is-enabled%2Cwhen-do-the-tokens-get-revoked-upon-password-expiry-or-password-change

234
jake.reworx307
2 months ago
C
cjjeonBeginner
asked in Authentication
Account Not Visible After Successful Authentication

I’ve updated app authentication from API key to OAuth 2.0. I’m currently testing in Private mode. OAuth flow works in a way that pop-up opens, login-in, grant access, and closes pop-up. However, the account in Trigger doesn’t show up even if I wait like a minute or two. It shows up after force refresh the page and account shows up. Is there a way that accounts show up smoothly without user have to refresh the page? I’ve noticed other apps, automatically change the account to new one that’s signed in. Any thoughts on why this might be happening?

461
C
2 months ago
A
AnkitIIhNew
asked in Authentication
Can I Update the API After Publishing a Custom Zapier App?

I have created 1 Custom Zapier APP for My Client, for now I am using Staging API and have plan to update the API of LIVE server once the Zapier APP (ex: XYZ) get Publish.So is this possible to update the Authentication and Trigger API after APP Publishing?

142
JammerS
2 months ago
S
Sigurdur130Beginner
asked in Authentication
Unnecessary Headers Injected in POST and GET Requests

Hey, I’m working on baby’s first development, so I’m bound to have pretty stupid questions: thanks in advance for the help! I hope to learn and ask smarter questions next time =)API docs for reference.I’m making a session auth step, and having a spot of trouble with the developer platform injecting X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into headers, and I can’t seem to get rid of them.Authentication POST requestThe API docs wantHeaders: Content-Type: application/json Api-version: alpha Body: ClientID ClientSecret The platform keeps autopopulating the X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into my headers, and I can’t delete them. Even if I hit the ‘X’ to delete them, they come back when I click back into the tab (even if I hit ‘save’). Test GET Request The API docs wantHeaders: Content-Type: application/json Api-version: alpha Authorization: bearer token Body: optional (not the issue here). Again, the platform keeps injecting X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY. When I tes

161
F
2 months ago
R
ragav_SRMNBeginner
asked in Authentication
Zapier couldn't connect to your account

 

413
Troy Tessalone
2 months ago
C
Code Monkey
asked in Authentication
Zapier not support refreshing refresh tokens in the OAuth flow?

It seems like a Zapier doesn’t fully implement the OAuth 2 flow, in regards to updating the refresh token. So the refresh token has to essentially live forever or you have to force customers to periodically update the refresh token? We’re returning the refresh_token in the auth token refresh request as specified in the OAuth standards but Zapier doesn’t actually use the refres_token in a subsequent response. Can anyone confirm if Zapier supports refreshing the refresh token in perhaps some other way without user interaction?    An example successful response:     HTTP/1.1 200 OK     Content-Type: application/json;charset=UTF-8     Cache-Control: no-store     Pragma: no-cache     {       "access_token":"2YotnFZFEjr1zCsicMWpAA",       "token_type":"example",       "expires_in":3600,       "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",       "example_parameter":"example_value"     } 

3382
P
2 months ago
V
vgtNew
asked in Authentication
Cognito - OAuth v2 int

I'm setting up my app for the first time with private integration. As my app api is protected with Cognito user pool, I'm setting up OAuth v2 authentication against Cognito. I have configured a new app in Cognito with client_id, client_secret and zappier.com as an authorized redirect url. However, zapier is not able to connect to the app. It goes through the authorize step successfully showing the login screen and fails at the token step with the below error. Appreciate any help. This is time sensitive for a funding demo.{"status":400,"headers":{"content-type":"application/json;charset=UTF-8","retry-after":null},"content":"{\"error\":\"invalid_client\"}" Regardsvg

374
D
3 months ago
V
venkateshBeginner
asked in Authentication
Encryption mechanism of environment variables on zapier

I wish to store some sensitive data in the environment variables to use in authentication flow. I’d like to know how does zapier stores these variables? Are these in some kind of vault or if there’s any security layer that protects these? What is the encryption mechanism for storing these variables.  

171
D
3 months ago
A
amarsinNew
asked in Authentication
Error encountered during app authentication

Not able to connect account for newly created app.2 issues.Sometimes in new pop up window auth url is not opening ( hit error getting oauth url) Sometimes auth page opened and after entering email and pwd received code and but exchange of code (AUTH RuntimeError Lambda function prd-mngd-lmbd_cliappjs18_cli-423959 took too long to be ready to use)

110
A
3 months ago
R
Rahul MahatoBeginner
asked in Authentication
How to Get Access Token for next call

In my Authentication Tab, I have generated the Token. And added the test connection URL as well to check whether endpoints are working fine.Now, On the next step - I need to check whether the particular user is present in target or not. But for that API call, we again need access token. But because of the last call was to get the data instead of token - I am getting the data and not the token. How can we retrieved the token in such case to use it in next step of ZAP?

170
R
3 months ago
M
MukundNew
asked in Authentication
How can I add Google Login in Basic Auth

My site have 2 login, Google Login, Email-Password Login. I want to add Google Login option in my basic auth. Please any one help me how to add that.

373
Troy Tessalone
3 months ago
AJM
AJMBeginner
asked in Authentication
Building a Custom Connector to Netsuite: Netsuite wants 24+ length "state" param yet Zapier's is 23

I’m trying to build a custom OAuth2 Integration with Netsuite using the developer console.Netsuite’s documentation requires a “state” parameter in the OAuth urls that is between 24 and 1024 characters long.Zapier’s state parameter is… 23 characters long 🤦Is there anyone who has successfully integrated with Netsuite who may have encountered this? I was hoping there’d be a way to override Zapier’s state param but I’m not seeing a way. Otherwise, is there perhaps another known way to do the integration (please don’t tell me I have to build a custom OAuth1 app).

2458
J
4 months ago
K
karthiNew
asked in Authentication
Zapier authentication expires inspite of using autorefresh of Oauth refresh_token

I have a integration in zapier. But the problem is oauth authentication is not working.I have tested authentication in platform UI i get the access token, refresh token,user values that i send from my app to zapier.I receive correct responses but after accessToken expires zapier account says the account is expired. What is the problem?.I use node-oauth2-server to implement oauth in my app. I have tested using postman for refresh_token endpoint and it works correctly.Can you please suggest any slutions as to test my refresh_token endpoint using zapier platform UI or zapier CLIThank you.My Response is as follows in access_token endpoint and refresh_token are same{ "access_token": "", "access_token_expires_at": "2024-08-19T07:34:23.871Z", "refresh_token": "", "refresh_token_expires_at": "2024-09-02T06:34:23.871Z", "scope": "read", "client": { "id": "" }, "user": { "id": id, "email": "email", "name": "name" }}I tried using platform UI

290
K
4 months ago
Terms & Conditions