Creating a Custom OAuth Application

Creating a custom OAuth application entails setting up and registering the application in the Xero WorkflowMax App Manager, and assigning Staff Privilege permissions to appropriate co-workers.

Creating the Custom OAuth Application

This procedure obtains the OAuth client credentials, the Client ID, and Client Secret:

1. Go to Xero WorkflowMax App Manager.
2. At the top right corner of the page, click New App.
3. Select Web App.
4. Add the redirect URL to OAuth 2.0 redirect URI field. Enter http://localhost:33333 (the CData callback URL), or choose a different port number if desired.
5. Fill the other form fields as desired.
6. Click Create App.
7. Click Save. Xero WorkflowMax directs you to the new web page for your custom OAuth application.
8. Scroll to the bottom of the page to find the Client ID.
9. To create your Client Secret, click Generate a secret.

Assigning "Authorise 3rd Party Access" Permissions

A new privilege, "Authorise 3rdc Party Access", helps control the proliferation of access by third-party software, to the Xero WorkflowMax server. Any employee with Administrator privileges (who can probably already connect such software to your server) can assign this new privilege to themselves or other Administrators.

Note: "Authorise 3rd Party Access" privileges can only be assigned to employees who already have Administrator privileges.

For each employee who should have the ability to authorize access to third party addons, do the following:

1. Go to Xero WorkflowMax Staff Settings
2. Search for the employee whose permissions should be edited.
3. Click the employee's name.
4. If the employee does not already have Administrator privileges, navigate to Admin Privileges and assign them now. Xero WorkflowMax redirects you to the Staff Settings page, where you must choose this employee again.
5. Scroll to the bottom of the page and find API Access Privileges.
6. Select Authorise 3rd Party Full Access.
7. Click Save.