[Update - April 30, 2021] Zoho CRM Authtoken Deprecation
Hello everyone,
The deadline for migrating from Authtoken to OAuth has been extended until May 31, 2021. Please switch to OAuth tokens before May 31 to prevent code breakage.
Thank you.
Hello everyone,
This post is regarding our upgrade to OAuth authentication for all the applications in the Zoho suite.
We still have a fair number of users and orgs who are using authtokens in their functions to make calls to other Zoho services like Creator, Books, Projects, etc., from Zoho CRM. We would like to bring to your notice that from May 1, 2021, all functions that use authtokens while making calls to other Zoho services will fail.
The sunset of basic authentication mode (Authtokens)
We hope you're aware that we've stopped the generation of authtokens for all the Zoho suite applications.
This update came into effect IN users from September 30th, 2020, EU and CN users from October 30th, 2020, and US users from November 30th, 2020. Refer to the announcement for more information.
The impact of the sunset
All the integration tasks that follow authtoken authentication will cease to work.
Why the upgrade?
Authtokens are quite straightforward. The user has to provide their username and password to get the authentication token (authtoken) to access the API. The authentication token is passed in the request header for every API request. The flaws in this authentication mechanism are evident.
- The lack of encryption makes the security risk fairly high.
- There is no bandwidth to grant or revoke access to specific resources in an application.
At Zoho, we take security very seriously, which motivates us to go to great lengths to ensure that your data is safe. Thus, we've upgraded to OAuth.
The OAuth Authentication
OAuth 2.0 is an industry-standard protocol specification that enables third-party applications (clients) to gain delegated access to protected resources in Zoho via an API.
Advantages of OAuth Authentication
- Clients are not required to support password authentication or store user credentials.
- Clients gain delegated access, i.e., access only to resources authenticated by the user.
- Users can revoke the client's delegated access anytime.
- OAuth2.0 access tokens expire after a set time. If the client faces a security breach, user data will be compromised only until the access token is valid.
Migrating from Authtoken authentication to OAuth
Refer to the announcement to know the next steps on migrating from authtoken to OAuth tokens.
We strongly recommend that you migrate to OAuth tokens on or before May 1, 2021, to avoid any breakage in your code.
Write to us at support@zohocrm.com if you have any questions.
Cheers!
Sneha Sridharan
New to Zoho LandingPage?
Zoho LandingPage Resources
New to Zoho Survey?
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Bigin?
Topic Participants
Sneha Sridharan
Sneha
Sticky Posts
Extension pointers for integrating Zoho CRM with Zoho products #8: Upload and manage Zoho Workdrive folders and files from within Zoho CRM
Keeping records on your customers and business prospects is essential for tracking data, conducting follow-ups, and running a business smoothly. When you use two separate applications, and store relevant data in each, checking and tracking data becomesExtension pointers: Handle cases with personalized solutions using custom actions
In our last post, we detailed the steps involved in creating a custom action and the workflow from the developer and end user's side. Now let's look at a working example of how we can create a custom action and implement it in a Zoho CRM account to makeExtension pointers - Simple yet significant pointers #13: On change of field value for CRM variables
CRM variables provide global access to a variable across an entire extension. They also help in the storage of user-specific data provided by the user at the time of installation, which can later be fetched to perform data functionalities. Additionally,Extension pointers: Extend end-user benefits and allow personalization by implementing extensions with custom actions
From our earlier post on custom actions, we know that we can create templated actions, share them with end users, and allow them to reuse those actions to achieve personalized outcomes. In this post, we'll look at how custom actions make it easy for usersExtension pointers - Simple yet significant pointers #12: Functions for Zoho CRM extensions
Functions are essential in achieving logical functionality for an extension. You can easily code your functions in Deluge using drag-and-drop tools to meet your requirements. How to create functions for Zoho CRM extensions in Sigma Go to Sigma and select
New to Zoho TeamInbox?
Zoho TeamInbox Resources
Zoho DataPrep Resources
Zoho CRM Plus Resources
Zoho Books Resources
Zoho Subscriptions Resources
Zoho Projects Resources
Zoho Sprints Resources
Qntrl Resources
Zoho Creator Resources
Zoho WorkDrive Resources
Zoho Campaigns Resources
Zoho CRM Resources
Design. Discuss. Deliver.
Zoho Show Resources
Get Started. Write Away!
Writer is a powerful online word processor, designed for collaborative work.
Zoho CRM コンテンツ
-
オンラインヘルプ
-
Webセミナー
-
機能活用動画
-
よくある質問
-
Ebook
-
-
Zoho Campaigns
- Zoho サービスのWebセミナー