Creating a Custom OAuth Application

All users authenticate to the Zuora via the OAuth 2.0 mechanism. The component uses the client_credential grant type, which means that only the OAuthClientId and OAuthClientSecret are needed to generate a token. This is done via a single HTTP request.

In order to obtain the OAuthClientId and OAuthClientSecret, you must first create a custom OAuth client in the Zuora UI.

Do the following:

1. Using an account that has administration privileges for your Zuora tenant, log in to the Zuora Profiles & Settings menu.
2. Navigate to Administration > Manage Users.
3. Create a user. Applications that use OAuth to authenticate to your Zuora tenant will perform actions as this user. Zuora recommends that you create an API user specifically for this purpose.
4. Navigate to your Zuora tenant's Users page.
5. Select the new user you just created, then create an OAuth client for that user.
6. Note the Client Id and Client secret for future use.