Announcing support for OAuth 2.0 Client Credentials grant type

Announced on | Rollout on
March 4, 2025 | March 4, 2025

Starting today, Zendesk is adding support for the Client Credentials grant type for confidential OAuth clients.

This announcement includes the following topics:

What's changing?

Why is Zendesk making this change?

What do I need to do?

What's changing?

The Client Credentials grant type is now available, allowing applications to request an access token to access their own resources without needing user authentication.

The flow is initiated by passing a valid client_secret parameter to the /oauth/tokens endpoint with grant_type: client_credentials to generate a new OAuth access token. This means you can now generate a new OAuth access token specifically for your application, allowing you to interact with Zendesk APIs more efficiently.

This grant type is exclusively for confidential OAuth clients, ensuring that sensitive client secrets are securely managed.

Why is Zendesk making this change?

This update further aligns us with the OAuth 2.0 standards, providing customers with more robust and flexible API authentication.

What do I need to do?

This grant type is available for you to adopt if you so choose. Learn more about using OAuth with your application.

If you have feedback or questions related to this announcement, visit our community forum where we collect and manage customer product feedback. For general assistance with your Zendesk products, contact Zendesk Customer Support.