Skip to main content


Jadu Connect supports the OAuth2 authorization code grant to achieve single sign-on. This follows the general process where the user is redirected to Jadu Connect to authenticate and then sent back to a given redirect URI with a single-use authorization code.

  • Authorization Code - The standard OAuth flow where the user is asked to 'authorize' your application before being redirected back with a code

Authorization Code

In order to request an access token, you must first request a code from the authorization page in Jadu Connect. Visit the page, providing the following GET parameters:

client_idThe public id for your OAuth client
redirect_uriOne of the URIs in the allowed list for you OAuth Client
stateA single use string that will be returned with your code. This should be validated by your application to protect against CSRF

Example URL to redirect user to:

Jadu Connect will ask you to sign in at this point if you are not already authenticated. If successful you may be asked to authorise the application, depending on whether or not this has been set as required within the Jadu Connect Integrations Hub.

User is prompted by Jadu Connect to authorise the application User is prompted by Jadu Connect to authorise the application

Once you accept, you are then redirected back to the redirect_uri, containing the code and state in the query string.


If there are errors, then the redirect will include the error and description:


The authorization code is valid for 30 seconds. A code can be used only once.

Use the code to request an access token:

curl -X POST \
-F client_id=zbueiup9h80s487asgc4s4gss4kww4cwsgk0owk4gc8s4kkg4 \
-F client_secret=4008txjcmcg0scg04oo8wsko054dg2f8ss4gsog0wgg8wwgw4w \
-F grant_type=authorization_code \
-F redirect_uri=https://myapp/oauth-handler \

Example response: