Question regarding application integrations

[Jeff Marshall]

For a third-party app to be used by several different Webex Organizations, is the process to do this:

1. Create an app integration on my/my company's account

2. Provide the integration's OAuth Authorization URL to customers of our product who then authenticate our application

3. Customer supplies the OAuth Code to our application where we can then obtain an access token for their organization

As opposed to each of the customers creating their own application integration and then providing our app with the client ID, client secret, and OAuth code?

[Jeff Marshall]

Anyone can authorize with an integration that you create so there is no need for each of your customers to create their own integration. After they browse to your OAuth Authorization URL and grant access to the integration they will then be redirected to whatever you defined as your redirect_uri and you can just extract the code value from the browsers address bar and use it to do a POST to the /access_token endpoint to exchange it for their access and refresh tokens. 

The only thing that may prevent them from authorizing with your integration is if their org admin blocks access to integrations and if that's the case then you'd just need to ask them to whitelist your integration using either the application ID or client ID so they can authorize with it.