Skip to navigation

Authentication

View as Markdown

Learn how to authenticate to the Zuora REST API using OAuth v2.0, including creating an OAuth client, generating a bearer token, and authenticating API requests.

Zuora recommends that you use OAuth v2.0 to authenticate to the REST API. Authenticating via OAuth requires the following steps:

1

Create an OAuth client in the Zuora UI

3

Authenticate subsequent API requests by providing a valid bearer token in an HTTP header: Authorization: Bearer {token}

If you have Zuora Multi-entity enabled and your bearer token is valid for more than one entity, use the Zuora-Entity-Ids header to specify which entity to perform each API request in. If your bearer token is only valid for a single entity, or you do not have Zuora Multi-entity enabled, you do not need to set the Zuora-Entity-Ids header in your API calls.

See Authentication for more information about how to authenticate to the REST API.