# Authentication

**URL:** https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md?page=7

[Latest](https://devforum.zoom.us/latest.md) · [Categories](https://devforum.zoom.us/categories.md) · [Tags](https://devforum.zoom.us/tags.md)

**Page:** 8

---

## [Getting Account ID for server-to-server OAuth](https://devforum.zoom.us/t/getting-account-id-for-server-to-server-oauth/70559)

<div class="topic-metadata">

**Author:** [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Replies:** 1\
**Last updated:** [October 23, 2023, 9:12pm UTC](https://devforum.zoom.us/t/getting-account-id-for-server-to-server-oauth/70559 "2023-10-23T21:12:02Z")

</div>

After a recent update, you may notice that some app credential fields have changed in the Server-to-Server OAuth app build page. If you are temporarily unable to see your account ID in the app, you will need to request t…

---

## [Invalid access token, does not contain scopes and scopes are not visible](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-and-scopes-are-not-visible/97025)

<div class="topic-metadata">

**Author:** [@integrations3](https://devforum.zoom.us/u/integrations3)\
**Replies:** 4\
**Last updated:** [October 20, 2023, 8:49pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-and-scopes-are-not-visible/97025 "2023-10-20T20:49:50Z")

</div>

I am doing HTTP POST to fetch user ZAK: POST https://zoom.us/oauth/token -d ‘grant\_type=account\_credentials’ -d ‘account\_id=SERVER\_TO\_SERVER\_APP\_ACCOUNT\_ID’ -H ‘Host: zoom.us’ -H ‘Authorization: Basic Base64Enco…

---

## [New App Validation Failure](https://devforum.zoom.us/t/new-app-validation-failure/96420)

<div class="topic-metadata">

**Author:** [@benkatz](https://devforum.zoom.us/u/benkatz)\
**Replies:** 10\
**Last updated:** [October 19, 2023, 12:56am UTC](https://devforum.zoom.us/t/new-app-validation-failure/96420 "2023-10-19T00:56:06Z")

</div>

I am attempting to set up a new " Server-to-Server OAuth" app before full depreciation of JWT apps takes effect. I’m working on the endpoint validation per the specifications here: I have attempted to implement this a…

---

## [Webhook Validation and Verification Process](https://devforum.zoom.us/t/webhook-validation-and-verification-process/96991)

<div class="topic-metadata">

**Author:** [@indranil.doss](https://devforum.zoom.us/u/indranil.doss)\
**Replies:** 1\
**Last updated:** [October 18, 2023, 8:31pm UTC](https://devforum.zoom.us/t/webhook-validation-and-verification-process/96991 "2023-10-18T20:31:22Z")

</div>

Description Details on your question, workflow or the problem you’re trying to solve. Currently the webhook validation and verification process that we follow involves making use of ‘verification\_token’. I went through…

---

## [Requesting an access token using a refresh token "reason":"Invalid Token!","error":"invalid\_grant"](https://devforum.zoom.us/t/requesting-an-access-token-using-a-refresh-token-reason-invalid-token-error-invalid-grant/96884)

<div class="topic-metadata">

**Author:** [@customers](https://devforum.zoom.us/u/customers)\
**Replies:** 3\
**Last updated:** [October 18, 2023, 3:10am UTC](https://devforum.zoom.us/t/requesting-an-access-token-using-a-refresh-token-reason-invalid-token-error-invalid-grant/96884 "2023-10-18T03:10:02Z")

</div>

For the past week or possibly even before, we have been encountering an error when attempting to request an access token using a refresh token. The error message we receive is as follows: {“reason”:“Invalid Token!”,“er…

---

## [Sign Me Out From All Devices does not revoke OAuth access token](https://devforum.zoom.us/t/sign-me-out-from-all-devices-does-not-revoke-oauth-access-token/96855)

<div class="topic-metadata">

**Author:** [@vuzix\_greg](https://devforum.zoom.us/u/vuzix_greg)\
**Replies:** 1\
**Last updated:** [October 16, 2023, 6:46pm UTC](https://devforum.zoom.us/t/sign-me-out-from-all-devices-does-not-revoke-oauth-access-token/96855 "2023-10-16T18:46:37Z")

</div>

On the Zoom website, there is an option on the profile page to “Sign Me Out From All Devices”. When you choose this option and confirm your choice on the dialog that pops up, you are immediately signed out of the desktop…

---

## [How to create "Redirect URL for OAuth" in Python?](https://devforum.zoom.us/t/how-to-create-redirect-url-for-oauth-in-python/96607)

<div class="topic-metadata">

**Author:** [@moliveira](https://devforum.zoom.us/u/moliveira)\
**Replies:** 3\
**Last updated:** [October 16, 2023, 5:06pm UTC](https://devforum.zoom.us/t/how-to-create-redirect-url-for-oauth-in-python/96607 "2023-10-16T17:06:51Z")

</div>

Can you help me please? I need to integrate with Power BI and when creating my application in ZOOM (OAuth 2.0), it asks for a Targeting URL, but I don’t know how I can get this URL. App Credentials Redirect URL for OA…

---

## [How to update Azure AD configuration to make use of Server-to-Server OAuth App from Zoom Marketplace](https://devforum.zoom.us/t/how-to-update-azure-ad-configuration-to-make-use-of-server-to-server-oauth-app-from-zoom-marketplace/95912)

<div class="topic-metadata">

**Author:** [@rahul\_chugh](https://devforum.zoom.us/u/rahul_chugh)\
**Replies:** 3\
**Last updated:** [October 16, 2023, 4:52pm UTC](https://devforum.zoom.us/t/how-to-update-azure-ad-configuration-to-make-use-of-server-to-server-oauth-app-from-zoom-marketplace/95912 "2023-10-16T16:52:07Z")

</div>

Description \*Got the notice to migrate off the JWT App usage for SCIM Integration with AAD for automated user provisioning. I was able to create a new Server-to-Server OAuth App in Zoom Marketplace but the Zoom App I’m …

---

## [Getting 4700 Invalid Redirect while trying to integrate Server-to-Server OAuth and Bookly Calendar](https://devforum.zoom.us/t/getting-4700-invalid-redirect-while-trying-to-integrate-server-to-server-oauth-and-bookly-calendar/96764)

<div class="topic-metadata">

**Author:** [@suara](https://devforum.zoom.us/u/suara)\
**Replies:** 1\
**Last updated:** [October 16, 2023, 2:15pm UTC](https://devforum.zoom.us/t/getting-4700-invalid-redirect-while-trying-to-integrate-server-to-server-oauth-and-bookly-calendar/96764 "2023-10-16T14:15:51Z")

</div>

Getting the message: “4700 Invalid Redirect” while trying to integrate Server-to-Server OAuth and Bookly Calendar. Not a developer, so I’m not understanding past posts to help remedy this problem. Sorry. How do I whit…

---

## [Do I need to publish my app to marketplace for Oauth integration?](https://devforum.zoom.us/t/do-i-need-to-publish-my-app-to-marketplace-for-oauth-integration/96442)

<div class="topic-metadata">

**Author:** [@NKM](https://devforum.zoom.us/u/NKM)\
**Replies:** 6\
**Last updated:** [October 11, 2023, 10:19am UTC](https://devforum.zoom.us/t/do-i-need-to-publish-my-app-to-marketplace-for-oauth-integration/96442 "2023-10-11T10:19:57Z")

</div>

I need to integrate my webapp with Zoom APIs. For this purpose, I chose the path of Oauth integration (they have also provided a sample oauth started app: GitHub - zoom/user-level-oauth-starter. Using this starter app I …

---

## [Auto Allow Waiting room](https://devforum.zoom.us/t/auto-allow-waiting-room/96274)

<div class="topic-metadata">

**Author:** [@sunilpurohit503](https://devforum.zoom.us/u/sunilpurohit503)\
**Replies:** 1\
**Last updated:** [October 5, 2023, 5:31pm UTC](https://devforum.zoom.us/t/auto-allow-waiting-room/96274 "2023-10-05T17:31:07Z")

</div>

To allow participants to join automatically without passcode or waiting room

---

## [Cannot Authenticate my Server to Server app and get my first token](https://devforum.zoom.us/t/cannot-authenticate-my-server-to-server-app-and-get-my-first-token/96154)

<div class="topic-metadata">

**Author:** [@thierry](https://devforum.zoom.us/u/thierry)\
**Replies:** 6\
**Last updated:** [October 4, 2023, 2:57pm UTC](https://devforum.zoom.us/t/cannot-authenticate-my-server-to-server-app-and-get-my-first-token/96154 "2023-10-04T14:57:07Z")

</div>

Hello everybody, API Endpoint(s): https://zoom.us/oauth/token Description : After registering my Server to Server app, I am trying to get my first OAuth token. I am using cURL language as follows: -X -H “Content-Ty…

---

## [Error exchanging code for access token](https://devforum.zoom.us/t/error-exchanging-code-for-access-token/96016)

<div class="topic-metadata">

**Author:** [@souvikdeb26](https://devforum.zoom.us/u/souvikdeb26)\
**Replies:** 1\
**Last updated:** [October 2, 2023, 3:51am UTC](https://devforum.zoom.us/t/error-exchanging-code-for-access-token/96016 "2023-10-02T03:51:39Z")

</div>

Format Your New Topic as Follows: Description Here’s my server.js code: // const express = require("express"); const cors = require("cors"); const axios = require("axios"); const app = express(); const port = process…

---

## [After switching a client to use OAuth from JWT the recording endpoint no longer include play\_url or download\_url](https://devforum.zoom.us/t/after-switching-a-client-to-use-oauth-from-jwt-the-recording-endpoint-no-longer-include-play-url-or-download-url/95385)

<div class="topic-metadata">

**Author:** [@eschug](https://devforum.zoom.us/u/eschug)\
**Replies:** 7\
**Last updated:** [September 28, 2023, 6:09pm UTC](https://devforum.zoom.us/t/after-switching-a-client-to-use-oauth-from-jwt-the-recording-endpoint-no-longer-include-play-url-or-download-url/95385 "2023-09-28T18:09:17Z")

</div>

The urls were appearing before switching to OAuth, but after switching it lists the recordings associated with the call but doesn’t include either of the urls. Nothing else in our software has changed and we just switch …

---

## [Invalid auth token](https://devforum.zoom.us/t/invalid-auth-token/95452)

<div class="topic-metadata">

**Author:** [@Rithanya](https://devforum.zoom.us/u/Rithanya)\
**Replies:** 6\
**Last updated:** [September 25, 2023, 3:45am UTC](https://devforum.zoom.us/t/invalid-auth-token/95452 "2023-09-25T03:45:53Z")

</div>

We are having an issue while creating a meeting with Zoom. We get this error: Failed due to error: Fetching tokens failed with error: {"reason"=\>"Invalid Token!", "error"=\>"invalid\_grant"}" When checking about this in…

---

## [Authenticate in a machine-to-machine context](https://devforum.zoom.us/t/authenticate-in-a-machine-to-machine-context/95525)

<div class="topic-metadata">

**Author:** [@stefan.norinder](https://devforum.zoom.us/u/stefan.norinder)\
**Replies:** 4\
**Last updated:** [September 22, 2023, 5:47am UTC](https://devforum.zoom.us/t/authenticate-in-a-machine-to-machine-context/95525 "2023-09-22T05:47:19Z")

</div>

We have an integration flow that uses Zoom Api to read and write user information. Now I’m trying to migrate our current authentication flow away from JWT tokens. So I created a server-to-server oauth flow, but when I co…

---

## [Python code calling oauth but not reaching my redirect-uri](https://devforum.zoom.us/t/python-code-calling-oauth-but-not-reaching-my-redirect-uri/95369)

<div class="topic-metadata">

**Author:** [@shlomi.fenster](https://devforum.zoom.us/u/shlomi.fenster)\
**Replies:** 3\
**Last updated:** [September 21, 2023, 7:23am UTC](https://devforum.zoom.us/t/python-code-calling-oauth-but-not-reaching-my-redirect-uri/95369 "2023-09-21T07:23:10Z")

</div>

Hello all. I’m new to trying to use oauth in my python code and web-app, (I’ve been using jwt till now), and despite following the tutorials supposedly to-the-letter, I’m obviously doing something wrong. My setup is as…

---

## [Need help with autorizations and token in PHP Curl](https://devforum.zoom.us/t/need-help-with-autorizations-and-token-in-php-curl/95313)

<div class="topic-metadata">

**Author:** [@Antho](https://devforum.zoom.us/u/Antho)\
**Replies:** 1\
**Last updated:** [September 19, 2023, 8:25am UTC](https://devforum.zoom.us/t/need-help-with-autorizations-and-token-in-php-curl/95313 "2023-09-19T08:25:41Z")

</div>

I’m lost with autorizations and tokens. I want to dynamically create meetings in PHP. I found this code but I can’t test it because I’m stuck for the token. $curl = curl\_init(); curl\_setopt\_array($curl, array( CURL…

---

## [Converted from JWT to OAuth but Can't Disable Old JWT App](https://devforum.zoom.us/t/converted-from-jwt-to-oauth-but-cant-disable-old-jwt-app/94592)

<div class="topic-metadata">

**Author:** [@theclassroomdoor](https://devforum.zoom.us/u/theclassroomdoor)\
**Replies:** 5\
**Last updated:** [September 15, 2023, 3:42pm UTC](https://devforum.zoom.us/t/converted-from-jwt-to-oauth-but-cant-disable-old-jwt-app/94592 "2023-09-15T15:42:00Z")

</div>

We are in the process of migrating our code from JWT to oAuth. We currently have an application that, on the server side, schedules a meeting in the future. When it is time for a user to join the meeting, the user visi…

---

## [Server to Server OAuth External Account Interaction](https://devforum.zoom.us/t/server-to-server-oauth-external-account-interaction/94941)

<div class="topic-metadata">

**Author:** [@sreskala](https://devforum.zoom.us/u/sreskala)\
**Replies:** 4\
**Last updated:** [September 13, 2023, 9:31pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-external-account-interaction/94941 "2023-09-13T21:31:40Z")

</div>

Description: Currently, our team is looking to integrate Zoom into our application in order to interact with the Zoom API to get information such as devices and rooms, etc… about a particular account. We would primarily …

---

## ["You cannot install this app." For some users](https://devforum.zoom.us/t/you-cannot-install-this-app-for-some-users/93562)

<div class="topic-metadata">

**Author:** [@eng1](https://devforum.zoom.us/u/eng1)\
**Replies:** 9\
**Last updated:** [August 22, 2023, 6:35pm UTC](https://devforum.zoom.us/t/you-cannot-install-this-app-for-some-users/93562 "2023-08-22T18:35:23Z")

</div>

API Endpoint(s) and/or Zoom API Event(s) https://zoom.us/oauth/authorize Description We are not on the marketplace yet, but we are authorized to have a few users outside our account use the app. Some users are able t…

---

## [Server to server oauth - invalid\_client](https://devforum.zoom.us/t/server-to-server-oauth-invalid-client/94641)

<div class="topic-metadata">

**Author:** [@imsclf](https://devforum.zoom.us/u/imsclf)\
**Replies:** 4\
**Last updated:** [September 11, 2023, 9:17pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-invalid-client/94641 "2023-09-11T21:17:43Z")

</div>

https://zoom.us/oauth/token?grant\_type=account\_credentials&accountid={accountId} I am trying to generate an access token for a server to server oauth application that I am migrating from JWT and am getting the error: {…

---

## [/oauth/authorize endpoint only asks for user credentials once, impeding us to login with different users](https://devforum.zoom.us/t/oauth-authorize-endpoint-only-asks-for-user-credentials-once-impeding-us-to-login-with-different-users/89199)

<div class="topic-metadata">

**Author:** [@danielmarcano](https://devforum.zoom.us/u/danielmarcano)\
**Replies:** 4\
**Last updated:** [September 11, 2023, 8:55pm UTC](https://devforum.zoom.us/t/oauth-authorize-endpoint-only-asks-for-user-credentials-once-impeding-us-to-login-with-different-users/89199 "2023-09-11T20:55:47Z")

</div>

Format Your New Topic as Follows: API Endpoint(s) and/or Zoom API Event(s) https://zoom.us/oauth/authorize Description The /oauth/authorize endpoint only asks for Zoom credentials once. Afterwards, it chooses the prev…

---

## [Migrating from JWT to Server-to-Server OAuth - Token\_type:bearer, expires\_in: 3599](https://devforum.zoom.us/t/migrating-from-jwt-to-server-to-server-oauth-token-type-bearer-expires-in-3599/89381)

<div class="topic-metadata">

**Author:** [@achinsk](https://devforum.zoom.us/u/achinsk)\
**Replies:** 7\
**Last updated:** [September 8, 2023, 10:34pm UTC](https://devforum.zoom.us/t/migrating-from-jwt-to-server-to-server-oauth-token-type-bearer-expires-in-3599/89381 "2023-09-08T22:34:50Z")

</div>

Hello, Up until today we use JWT token that I could setup Bearer token once to expire at any future date. Then we could open our webpage at anytime which on backend it curl “GET” info from our ZOOM account and show it …

---

## [Suddenly getting 401s after s2s oauth worked for a week](https://devforum.zoom.us/t/suddenly-getting-401s-after-s2s-oauth-worked-for-a-week/94662)

<div class="topic-metadata">

**Author:** [@JamieH](https://devforum.zoom.us/u/JamieH)\
**Replies:** 1\
**Last updated:** [September 8, 2023, 9:59pm UTC](https://devforum.zoom.us/t/suddenly-getting-401s-after-s2s-oauth-worked-for-a-week/94662 "2023-09-08T21:59:00Z")

</div>

Affected endpoints POST /v2/users/:userId/meetings DELETE /v2/meetings/:meetingId App type server-to-sever oauth Description We have a Zoom server-to-server oauth app. Our service code uses this Zoom oauth app to crea…

---

## [Migrating Azure Enterprise App SCIM provisioning from JWT to OAuth concerns](https://devforum.zoom.us/t/migrating-azure-enterprise-app-scim-provisioning-from-jwt-to-oauth-concerns/94477)

<div class="topic-metadata">

**Author:** [@jakob.wilhelmsson](https://devforum.zoom.us/u/jakob.wilhelmsson)\
**Replies:** 1\
**Last updated:** [September 8, 2023, 3:33pm UTC](https://devforum.zoom.us/t/migrating-azure-enterprise-app-scim-provisioning-from-jwt-to-oauth-concerns/94477 "2023-09-08T15:33:13Z")

</div>

I’m currently acting on the deprecation of JWT and migrating to OAuth, which we have been using for our SCIM integration for provisioning from our Azure AD. I have followed the guide provided Migrating the Zoom app in Az…

---

## [How to deal with expired refresh tokens in S2S OAuth](https://devforum.zoom.us/t/how-to-deal-with-expired-refresh-tokens-in-s2s-oauth/94528)

<div class="topic-metadata">

**Author:** [@ayushpr](https://devforum.zoom.us/u/ayushpr)\
**Replies:** 5\
**Last updated:** [September 8, 2023, 1:59pm UTC](https://devforum.zoom.us/t/how-to-deal-with-expired-refresh-tokens-in-s2s-oauth/94528 "2023-09-08T13:59:08Z")

</div>

Format Your New Topic as Follows: API Endpoint(s) and/or Zoom API Event(s) https://zoom.us/oauth/token Description We are exploring strategies to manage expired refresh tokens within the context of S2S OAuth. What wo…

---

## [JWT integration](https://devforum.zoom.us/t/jwt-integration/94612)

<div class="topic-metadata">

**Author:** [@damian1](https://devforum.zoom.us/u/damian1)\
**Replies:** 1\
**Last updated:** [September 7, 2023, 4:01pm UTC](https://devforum.zoom.us/t/jwt-integration/94612 "2023-09-07T16:01:19Z")

</div>

Hi, I’ve been forwarded here by your customer support although I’m not a developer and not sure if this actually is a question for this forum. Checked in the Zoom Marketplace and we have one created app still using JW…

---

## [Server to server app authentication issue](https://devforum.zoom.us/t/server-to-server-app-authentication-issue/94271)

<div class="topic-metadata">

**Author:** [@geoff.crego](https://devforum.zoom.us/u/geoff.crego)\
**Replies:** 3\
**Last updated:** [September 7, 2023, 2:25am UTC](https://devforum.zoom.us/t/server-to-server-app-authentication-issue/94271 "2023-09-07T02:25:57Z")

</div>

API Endpoint(s) and/or Zoom API Event(s) https://zoom.us/oauth/token?grant\_type=account\_credentials&account\_id=xxxxxxx Description Setting up a new Server to server internal app and running into an issue getting the a…

---

## [I can't authenticate my application](https://devforum.zoom.us/t/i-cant-authenticate-my-application/83108)

<div class="topic-metadata">

**Author:** [@a.s.rwar](https://devforum.zoom.us/u/a.s.rwar)\
**Replies:** 3\
**Last updated:** [September 6, 2023, 2:15pm UTC](https://devforum.zoom.us/t/i-cant-authenticate-my-application/83108 "2023-09-06T14:15:07Z")

</div>

\<?php require\_once 'config.php'; try { $client = new GuzzleHttp\\Client(\['base\_uri' =\> 'https://zoom.us'\]); $response = $client-\>request('POST', '/oauth/token', \[ "headers" =\> \[ "Authoriz…

[Previous page](https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md?page=6)

[Next page](https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md?page=8)
