CRM Open API DocumentationCRM Open API Documentation
REST API
Webhooks
Client OAuth
PSP Open API
External Exchange Rates
REST API
Webhooks
Client OAuth
PSP Open API
External Exchange Rates
  • Client OAuth Flow
  • OAuth Applications
  • Authorization Code + PKCE

    • Authorization Code + PKCE Introduction
    • Redirect to Login
    • Get Token
    • Compute PKCE Code Challenge
    • Logout
  • Authorization Code + PKCE (Iframe)

    • Authorization Code + PKCE Introduction
    • Post Message
    • Get Token
    • Compute PKCE Code Challenge
  • Resource Owner Password Credentials (ROPC)

    • ROPC Introduction
    • Get Token
    • Verify MFA Code
    • Get MFA Secret
    • Send Email OTP for MFA
    • Bind MFA Method and enable MFA
    • Deactivate MFA
    • Forgot Password
  • Refresh Token

    • Refresh Token
    • Revoke Refresh Token

Redirect to Login

GET {Client Portal Hostname}/login

Query Parameters

KeyTypeRequiredRuleDescription
client_idstringMandatoryClient ID of the OAuth Application
scopestringMandatorymust be user-portal:user:*OAuth Scope
response_typestringMandatorymust be codeOAuth 2.0 response type
code_challenge_methodstringMandatorymust be S256PKCE challenge method
code_challengestringMandatoryrefer to this guidePKCE challenge derived from the original code_verifier
redirect_uristringMandatorymust match registeredRedirect URI to receive the authorization code
statestringOptionalCSRF protection; echoed back on redirect

Expected Outcome

Redirects the user to the CRM login UI. After successful authentication and consent, the user is redirected to the registered redirect_uri with code and optional state as query parameters.

Error

Redirect to the registered redirect_uri with error and optional error_description as query parameters.

errorerror_description
invalid_requestinvalid client id
invalid_requestinvalid redirect uri
invalid_requestinvalid code challenge
invalid_requestinvalid code challenge method
unsupported_response_typeunsupported response type
unauthorized_clientunauthorized client
Last Updated: 12/8/25, 2:08 AM
Prev
Authorization Code + PKCE Introduction
Next
Get Token