{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Authentication Workflow","description":"Developer documentation for the WHMCS API — the","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"authentication-workflow","__idx":0},"children":["Authentication Workflow"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Here’s how the process typically works."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["User presses a “Connect to WHMCS” button inside your app."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Your app redirects the user to the WHMCS installation."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user logs into WHMCS and authorizes your app to access their WHMCS account using the permissions your app has requested."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After the user approves your app, they’ll be redirected back to your app with an authorization code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Your app can then use this authorization code to make a request for a re-usable access token which can be used to make subsequent requests to the WHMCS API. This takes place in the background and should not be visible to end users."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["All OAuth requests require a valid API Client Credential Identifier and Secret. Credentials for OpenID connect can be created via the OpenID Connect admin interface. For Single Sign-On credentials, we recommend using the Provisioning Module API for Application Links. Alternatively, you can provision and manage OAuth Client Credentials via the WHMCS API."]}]},"headings":[{"value":"Authentication Workflow","id":"authentication-workflow","depth":1}],"frontmatter":{"title":"Authentication Workflow","seo":{"title":"Authentication Workflow"}},"lastModified":"2026-08-03T17:00:42.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/oauth/auth-workflow","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}