> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/docs/platform/security-and-identity/administrator-settings/add-oauth-2-0-provider/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Add an OAuth 2.0 provider

> Learn how to add an OAuth 2.0 provider for callout notifications, external SMTP servers, and so on.

Learn how to add an OAuth 2.0 provider for callout notifications, external SMTP servers, and so on.

Navigate to **Settings** > **Administration** > **Manage OAuth 2.0 Providers**.

Click **New OAuth 2.0 Provider** on the All OAuth 2.0 Providers page.

Fill in the fields on the New OAuth 2.0 Provider page.

See the table below for the descriptions of the fields.

<table>
  <tr>
    <th>
      Field
    </th>

    <th>
      Description
    </th>
  </tr>

  <tr>
    <td>
      **Name** (required)
    </td>

    <td>
      Name of the new OAuth 2.0 provider.
    </td>
  </tr>

  <tr>
    <td>
      **Grant Type** (required)
    </td>

    <td>
      OAuth 2.0 grant type. Supported grant types:

      * Client Credentials
      * Refresh Token
      * Authorization Code
    </td>
  </tr>

  <tr>
    <td>
      **Client ID** (required)
    </td>

    <td>
      The client ID that your callout service uses to identify Zuora application.
    </td>
  </tr>

  <tr>
    <td>
      **Client Secret** (required)
    </td>

    <td>
      The client secret that your callout service uses to authenticate the identity of Zuora application. The character limit for this field is 16,000.
    </td>
  </tr>

  <tr>
    <td>
      **Refresh Token** (applicable only when the grant type is Refresh Token)
    </td>

    <td>
      The refresh token that you get from your callout service. It allows the client to obtain a new access token without prompting the user authentication.
    </td>
  </tr>

  <tr>
    <td>
      **Authorization Endpoint** (applicable only when the grant type is Authorization Code)
    </td>

    <td>
      The authorization endpoint that is used to interact with the resource owner and get the authorization to access the protected resource. In the Authorization Code flow, Zuora exchanges the authorization code it got from the authorization endpoint for an access token.
    </td>
  </tr>

  <tr>
    <td>
      **Access Token Endpoint** (required)
    </td>

    <td>
      The endpoint that the client uses to obtain an access token given an authorization code.
    </td>
  </tr>

  <tr>
    <td>
      **Revoke Endpoint** (optional)
    </td>

    <td>
      The endpoint used by the authenticated client to revoke access and refresh token.
    </td>
  </tr>

  <tr>
    <td>
      **Test Endpoint** (optional)
    </td>

    <td>
      The endpoint that you can use to test your configuration.
    </td>
  </tr>

  <tr>
    <td>
      **Scope** (optional)
    </td>

    <td>
      A space-delimited or comma-delimited list of permissions that Zuora requires.
    </td>
  </tr>

  <tr>
    <td>
      **Additional Parameters** (optional)
    </td>

    <td>
      Click **Add Parameter** to add any information you want to send in the OAuth 2.0 requests, such as the audience of the access token.
    </td>
  </tr>
</table>

Click **Save**.

> Learn how to add an OAuth 2.0 provider for callout notifications, external SMTP servers, and so on.

## Docs

- [Retrieve the ID of an OAuth 2.0 provider](https://zuora.ferndocs.com/docs/platform/security-and-identity/administrator-settings/add-oauth-2-0-provider/retrieve-the-id-of-an-oauth-20-provider.md): Learn how to retrieve the ID of an OAuth 2.0 provider.