TOPdesk now supports OAuth 2.0, the modern industry standard for securely authenticating integrations.
Instead of long-lived passwords, OAuth 2.0 uses short-lived tokens that expire automatically. This reduces the risks associated with long-lived credentials and helps your organisation meet modern security and compliance requirements.
Administrators can set up and manage OAuth clients themselves in Supporting Files → Connected applications, without involving TOPdesk Support.
A secure foundation for integrations
OAuth 2.0 isn’t just a new authentication option. It provides a secure foundation that other TOPdesk capabilities can build on.
It already enables SCIM user provisioning from Microsoft Entra ID and a simpler login for the TOPdesk app for Microsoft Teams. With Teams, operators can log in with their own TOPdesk account or SSO instead of generating an application token. They also no longer need separate REST API permissions.
Existing API accounts using Basic Authentication and existing application tokens will continue to work, so there’s no forced migration.
With OAuth 2.0, integrations become more secure and easier to manage — while providing a foundation for more improvements in the future.
How could OAuth 2.0 help your organisation? Let us know in the comments!