If either situation applies, create an OAuth client for Genesys Cloud Embeddable Framework:

• You want to implement a public deployment.
• You want to implement a private deployment that accesses the getAuthToken method in your framework.js file. For more information, see User.getAuthToken in the Genesys Cloud Developer Center.

An OAuth client generates a Client ID that developers can use for the clientIds in the framework.js file. For more information, see clientIds in the Genesys Cloud Developer Center.

1. Click Admin.
2. Under Integrations, click OAuth.
3. Click Menu > IT and Integrations > OAuth.
4. Click Add client. The Add New Client page appears.
5. In the App Name field, enter the name of the application.
6. (Optional) In the Description field, enter the description.
7. In the Grant Types field, select the following option:
   • Code Authorization / PKCE (recommended): A two-step authentication process where a user authenticates with Genesys Cloud and the client application is then returned an authorization code. The client application provides OAuth client credentials and uses the authorization code to get an access token. The access token can then be used when making authenticated API calls.
8. Click Next.
9. In the Token Duration in seconds field, enter the required duration for the token. Accept the default duration, or enter a value between 300 and 172800 seconds. This duration sets the lifetime of the token to a maximum of two days or less.
   Note: Genesys recommends that you set the token duration to 18 hours (64,800 seconds). This duration generally causes the token to expire outside an agent’s normal workday.
10. In the Authorized redirect URIs (one per line) box, add https://apps.mypurecloud.com/crm/index.html, customized according to your Genesys Cloud region.
    Notes:

    • Use the AWS region according to your deployment.
    • If you set dedicatedLoginWindow to true in your framework.js file, also add https://apps.mypurecloud.com/crm/authWindow.html under Authorized redirect URIs. For more information, see dedicatedLoginWindow under settings in the Developer Center.
    • After Genesys publishes your public deployment, Genesys will provide you with a new URI to use.
11. In the Scope field, select the required scopes. You can also add more scopes. For a list of required scopes, see Administrator requirements for the Genesys Cloud embedded clients. For more information about scopes, see OAuth Scopes in the Developer Center.
12. Click Save. In the Add New Client page, the Client Secret section appears. The Client Secret field displays a secret string that the application uses to prove its identity when the user requests for a token. This secret can also be referred as the application password.
    Note: You can view this secret only once at the time of setup.
    You can perform the following actions in this field:
    • To view details about the password, click Show .
    • To copy the password, click Copy .
    • To generate a new secret code, click Generate new secret. The Generate New Client Secret? dialog box appears
      
      • The Generate New Client Secret? dialog box appears. Click Confirm.
      • A message confirms that the password has been changed.  
13. Click Finish.
14. The Copy and Store Client Secret dialog box appears. To confirm that you copied and stored the password, select the checkbox. If you proceed, you cannot view this password again. 
15. Click Confirm. The app you just created appears with the following section at the bottom of the page.
    • Created By: Displays the name of the user who created the client.
    • Date: Displays the creation date of the new client.
    • Modified By: Displays the name of the user who modified the client details.
    • Date: Displays the modification date of the client.

Provide the Client ID to the developers, who in turn add the Client ID to clientIds in the framework.js file. For more information, see clientIds in the Developer Center.

For more information about the integration, see About Genesys Cloud Embeddable Framework.

To use Genesys Cloud SCIM (Identity Management), create a Genesys Cloud OAuth client. The OAuth client generates a Client ID and Client Secret that you add to your identity management system. 

1. Click Menu > IT and Integrations > OAuth.
2. Click Add Client. The Add New Client page appears.
3. In the App Name field, enter the name of the application.
4. (Optional) In the Description field, enter the description.
5. In the Grant Types field, select Client Credentials. For more information about each grant, see the Platform API section steps 5-7.
6. Click Next.
7. In the Assign Roles table, in the Assigned column, assign the SCIM Integration role.
   Note: To grant this role to your OAuth client, you must have this role assigned to your profile. Do not assign other roles to your OAuth client or other permissions to the SCIM Integration role. If you do not assign other roles or permissions, the value you set in the Token Duration in seconds field reverts to the default value of 86,400 seconds. Also, include all divisions that you will manage with SCIM.
8. Click Next.
9. In the Token Duration in seconds field, enter the required duration for the token. The Token Duration is the duration of time until tokens created with this client expire. Accept the default duration of 86,400, or enter a value between 300 and 38,880,000 seconds. This sets the lifetime of the token to a maximum of 450 days.
   Note: You can only set the maximum to 38,880,000 seconds if you use the SCIM Integration role or a custom role that has the same permissions.
10. Click Save. A message confirms that the client has been created. In the Add New Client page, the Client Secret section appears. The Client Secret field displays a secret string that the application uses to prove its identity when the user requests for a token. This secret can also be referred as the application password.
    Note: You can view this secret only once at the time of setup.
    You can perform the following actions in this field:
    • To view details about the password, click Show .
    • To copy the password, click Copy .
    • To generate a new secret code, click Generate new secret. The Generate New Client Secret? dialog box appears
      
      • The Generate New Client Secret? dialog box appears. Click Confirm.
      • A message confirms that the password has been changed.  
11. Click Finish.
12. The Copy and Store Client Secret dialog box appears. To confirm that you copied and stored the password, select the checkbox. If you proceed, you cannot view this password again. 
13. Click Confirm. The app you just created appears with the following section at the bottom of the page.
    
    • Created By: Displays the name of the user who created the client.
    • Date: Displays the creation date of the new client.
    • Modified By: Displays the name of the user who modified the client details.
    • Date: Displays the modification date of the client.

You can further perform the following actions on this page:

• Edit the client details by clicking the Edit Client button.
• Delete the client created by clicking the Delete Client button.

For information about Genesys Cloud SCIM (Identity Management), see About Genesys Cloud SCIM (Identity Management) and Genesys Cloud SCIM (Identity Management) overview (Genesys Cloud Developer Center).