DocumentationAPI Reference

Using the API when SSO or two-factor authentication is enabled

If your organization uses single sign-on (SSO) or two-factor authentication is enabled in your user profile, you can authenticate requests using an OAuth access token.

Using an OAuth access token

You can authenticate Zendesk API requests using an OAuth access token. OAuth tokens are tied to a specific user and use scopes to limit access to a Zendesk account.

Developers often use OAuth access tokens to authenticate Zendesk API requests on behalf of their users. This involves building an OAuth authorization flow that requires interaction from the user. For an example of this setup, see Using OAuth to authenticate Zendesk API requests in a web app.

You can also create and use OAuth access tokens on your own behalf without building an authorization flow. For more information, see Creating and using OAuth tokens with the API.

Use OAuth access tokens in the following cases:

  • Example requests from the API reference
  • Internal scripts that make programmatic API requests
  • Apps that require per-user authentication
  • Apps developed by third-party developers