Create a service user account
Each OAuth client must be linked to a dedicated Agiloft user account. This account acts as a service user — all API calls made through the client run with its identity and permissions.When creating the service user account, keep in mind:
- The account must be a native Agiloft account (LDAP accounts are not supported).
- Each OAuth client must use a different account. Multiple clients sharing the same account will invalidate each other’s tokens.
- The account requires an Admin or Standard license.
- Add the appropriate groups to the account to grant access to the records you plan to interact with via the API.
Open the OAuth2 Client Setup
Log in to your Agiloft instance and go to Setup > Integration > OAuth2 Client Setup.Click Deploy, Upgrade, or Configure depending on what is shown:
- Deploy: deploys the OAuth2 client for the first time (takes a few minutes).
- Upgrade: upgrades an already-deployed client to the latest version.
- Configure: takes you directly to the API Application screen.
Create a new API application
On the API Application screen, click New to open the OAuth2 Application Settings wizard.Fill in the required fields:
- Authorization Grant Type: select Authorization Code.
- Name: a unique name for the application used with the REST API.
- Display Name: the name shown in your Agiloft KB.
- Full Name: the name of the service user account created in step 1. The Associate this Application with Contact ID field will be populated automatically.
- Redirect URI: enter
https://api.nango.dev/oauth/callback. - Token Expiry in Minutes: leave at the default (15) or set a value between 1 and 60.
Enable the application and copy credentials
Click Enable to activate the application. This generates your Client ID and Client Secret.Copy both values — you will need them when configuring the integration in Nango.
Configure the integration in Nango
In Nango, when setting up the Agiloft integration, enter your Client ID and Client Secret.Set the Scopes field to
permissions_for:{contactId}, replacing {contactId} with the Contact ID from the Associate this Application with Contact ID field in your Agiloft API application (e.g. permissions_for:213).Then follow the quickstart to connect your first account.