# What changes do we need to make to use SSO authentication rather than API key?

**URL:** <https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471>\
**Category:** API Q&A\
**Created:** [March 20, 2018, 4:54pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471 "2018-03-20T16:54:20Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 20, 2018, 4:54pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/1 "2018-03-20T16:54:21Z")

</div>

Hi,  
We have developed a plugin to send form submissions to Infusionsoft. It currently uses BOTH the Infusionsoft® Client ID and Infusionsoft® Client Secret, as well as the SSO authentication:

 ![2018-03-20%2012-49-44](https://us1.discourse-cdn.com/flex019/uploads/infusionsoft1/original/2X/4/4557db3d1d39003e98fdb13cff5263d08aafd483.png)  
Can you please point me to documentation on how the integration should be updated?  
Thanks,  
Josh

---

<div class="post-metadata">

**Author:** ![John\_Borelli](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/john_borelli/32/11880_2.png) [@John\_Borelli](https://integration.keap.com/u/John_Borelli)\
**Post date:** [March 20, 2018, 4:56pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/2 "2018-03-20T16:56:33Z")

</div>

I wouldn’t completely abandon the OAuth inclusion…maybe hide it for now? The api key will be phased out in the future so it’s best to ensure preparedness up front rather than having to go back to modify later. Also note that anything using the api key method cannot be included in the Infusionsoft marketplace.

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 20, 2018, 6:23pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/3 "2018-03-20T18:23:15Z")

</div>

Thanks! We get this error with the current configuration.

```
<img src="https://monosnap.com/file/Dleuuer5j4QDSl5N8IIdduuxGEuKni.png">

```

> **[monosnap.com](https://monosnap.com/file/Dleuuer5j4QDSl5N8IIdduuxGEuKni)**
>
> Monosnap screenshot tool for Mac and PC with own cloud storage. Take screenshots, record videos and upload files directly to the cloud. Just in one click.

Also, please note there is no phone number on the error screen.

What changes do you recommend?

---

<div class="post-metadata">

**Author:** ![John\_Borelli](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/john_borelli/32/11880_2.png) [@John\_Borelli](https://integration.keap.com/u/John_Borelli)\
**Post date:** [March 20, 2018, 6:39pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/4 "2018-03-20T18:39:55Z")

</div>

I can’t really track what’s going on as there is no way for me to pause the images. I’ll share the vid I did on OAuth and the common mistakes involved in hopes it will help. I know it’s about 30 minutes but it goes over quite a bit in that time:

[![](https://us1.discourse-cdn.com/flex019/uploads/infusionsoft1/original/2X/6/636d9b0c40071bb3385c3bbf0995d6c5fd9b1be5.jpeg "Using OAuth2 and Infusionsoft API/REST") ](https://www.youtube.com/watch?v=zjS8tCmnkBs)

---

<div class="post-metadata">

**Author:** ![Nicholas\_Trecina](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/nicholas_trecina/32/5338_2.png) [@Nicholas\_Trecina](https://integration.keap.com/u/Nicholas_Trecina)\
**Post date:** [March 21, 2018, 4:35pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/5 "2018-03-21T16:35:15Z")

</div>

Hi @Josh_Fialkoff, based on that video and error message it looks like you don’t have any Infusionsoft applications assigned to your account.

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 21, 2018, 4:56pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/6 "2018-03-21T16:56:52Z")

</div>

Thanks for your help @Nicholas_Trecina. On what URL can I verify that?

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 21, 2018, 4:57pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/7 "2018-03-21T16:57:43Z")

</div>

@John_Borelli Here’s an MP4 version of the screencast. Please let me know if that helps.

> **[monosnap.com](https://monosnap.com/file/rfQ1dgohmKW13TEkh3irVIqsTBaJBS)**
>
> Monosnap screenshot tool for Mac and PC with own cloud storage. Take screenshots, record videos and upload files directly to the cloud. Just in one click.

---

<div class="post-metadata">

**Author:** ![Nicholas\_Trecina](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/nicholas_trecina/32/5338_2.png) [@Nicholas\_Trecina](https://integration.keap.com/u/Nicholas_Trecina)\
**Post date:** [March 21, 2018, 6:08pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/8 "2018-03-21T18:08:07Z")

</div>

If you go to [https://accounts.infusionsoft.com](https://accounts.infusionsoft.com) it will show you the accounts that are linked to your Infusionsoft ID.

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 21, 2018, 8:08pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/9 "2018-03-21T20:08:41Z")

</div>

Here it is @Nicholas_Trecina. I’m happy to show you the full image privately.

 ![2018-03-21%2016-07-23](https://us1.discourse-cdn.com/flex019/uploads/infusionsoft1/original/2X/8/8512c1a01004fa0afe8ed00184e7b161f17c81d0.png)

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [March 21, 2018, 10:31pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/10 "2018-03-21T22:31:09Z")

</div>

We introduced a bug late last week that displays the wrong error message. The fix is being deployed tonight. The real issue is that the client\_id is invalid (either not active or just plain wrong).

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [March 22, 2018, 1:48am UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/11 "2018-03-22T01:48:13Z")

</div>

This should be fixed now.

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 22, 2018, 11:20am UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/12 "2018-03-22T11:20:30Z")

</div>

Thanks for the update. However, the problem remains.  
Here’s a video after I cleared by browser cache:

> **[monosnap.com](https://monosnap.com/file/F3iV52MB8LC73bzDrZn4NhZbv8imJB)**
>
> Monosnap screenshot tool for Mac and PC with own cloud storage. Take screenshots, record videos and upload files directly to the cloud. Just in one click.

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [March 22, 2018, 5:28pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/13 "2018-03-22T17:28:08Z")

</div>

@Josh_Fialkoff, we fixed the error message. So what you are seeing that we do not recognize your `client_id`. What is your `client_id` that you are sending, the video is cropping the url. `client_id`s are public so it is safe to post in here. Just don’t post the `client_secret`.

---

<div class="post-metadata">

**Author:** ![John\_Borelli](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/john_borelli/32/11880_2.png) [@John\_Borelli](https://integration.keap.com/u/John_Borelli)\
**Post date:** [March 23, 2018, 9:33am UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/14 "2018-03-23T09:33:08Z")

</div>

@Josh_Fialkoff,

Have you created your mashery account and setup the app in there and verified that it is set to active?

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 23, 2018, 12:12pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/15 "2018-03-23T12:12:12Z")

</div>

Here is a video with the client ID:  
[https://monosnap.com/file/ASlttK0ffdVhrxHdfiCN7sUvblQf9Z](https://monosnap.com/file/ASlttK0ffdVhrxHdfiCN7sUvblQf9Z)

Please let me know what you recommend.

We do not have a Mashery account.

If I make one now, how do we connect it to this?

Thanks,

Josh

---

<div class="post-metadata">

**Author:** ![John\_Borelli](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/john_borelli/32/11880_2.png) [@John\_Borelli](https://integration.keap.com/u/John_Borelli)\
**Post date:** [March 23, 2018, 3:45pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/16 "2018-03-23T15:45:20Z")

</div>

@Josh_Fialkoff,

My vid on this covers that and other details:

[![](https://us1.discourse-cdn.com/flex019/uploads/infusionsoft1/original/2X/6/636d9b0c40071bb3385c3bbf0995d6c5fd9b1be5.jpeg "Using OAuth2 and Infusionsoft API/REST") ](https://www.youtube.com/watch?v=zjS8tCmnkBs)

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [March 23, 2018, 4:19pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/17 "2018-03-23T16:19:07Z")

</div>

That `client_id` is not in our system. What is your mashery username or application name?

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 23, 2018, 5:24pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/18 "2018-03-23T17:24:00Z")

</div>

Here it is:  
Application  
WordPress Gravity Forms integration  
client\_id  
2ahsfpmddaj78p8ybs6eyax2

---

<div class="post-metadata">

**Author:** ![bradb](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/bradb/32/13_2.png) [@bradb](https://integration.keap.com/u/bradb)\
**Post date:** [March 23, 2018, 5:42pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/19 "2018-03-23T17:42:05Z")

</div>

Why is this client id and the one in the video different?

Get [Outlook for iOS](https://aka.ms/o0ukef)

---

<div class="post-metadata">

**Author:** ![Josh\_Fialkoff](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/josh_fialkoff/32/313_2.png) [@Josh\_Fialkoff](https://integration.keap.com/u/Josh_Fialkoff)\
**Post date:** [March 23, 2018, 6:02pm UTC](https://integration.keap.com/t/what-changes-do-we-need-to-make-to-use-sso-authentication-rather-than-api-key/34471/20 "2018-03-23T18:02:08Z")

</div>

You’re right. When we fixed that, it works. Thanks for your help!
