> You are reading the Docusign Developer Documentation. For clean Markdown of any page, append .md to the page URL.
>
> Documentation indexes by section:
> - APIs and SDKs: https://docusign.docs.buildwithfern.com/docs/llms.txt
> - Platform 101: https://docusign.docs.buildwithfern.com/platform/llms.txt
> - Extension Apps: https://docusign.docs.buildwithfern.com/extension-apps/llms.txt
> - Docusign CLI: https://docusign.docs.buildwithfern.com/docusign-cli/llms.txt
>
> Authentication (OAuth, JWT Grant, M2M): https://docusign.docs.buildwithfern.com/platform/auth
> Webhooks and Connect: https://docusign.docs.buildwithfern.com/platform/webhooks
>
> OpenAPI specifications: https://docusign.docs.buildwithfern.com/openapi.json
> MCP server: https://docusign.docs.buildwithfern.com/_mcp/server

# Authentication: Overview

> **Warning**
>
> Developing with the CLM API is only available for CLM customers with a production account. To purchase a plan to gain access to the CLM API, contact [Docusign Sales](https://www.docusign.com/contact-sales).

There are no unauthenticated endpoints in the Docusign CLM API, authentication must take place and an access token must be obtained to make any call to the Object, Task, and Content APIs. Docusign CLM supports three forms of authentication:

* [OAuth 2.0 Web Server Flow](/docs/clm-api/clm.cm/clm101/authentication/oauth2-web-server-flow)
* [Salesforce Client Flow](/docs/clm-api/clm.cm/clm101/authentication/salesforce-client-flow)
* [API User Authentication Flow](/docs/clm-api/clm.cm/clm101/authentication/api-user-authentication-flow)

For all forms of authentication a Client Secret and Client Id must be provisioned from Docusign. This is currently done by opening a case with [CLM Technical Support](https://support.docusign.com/s/contactSupport).
Separate keys must be issued if you are working in the UAT and Production environments, as keys cannot be shared across these environments. When requesting your keys please include the following information:

* Application Name.
* Application Contact Email Address.
* Docusign CLM Environment: Production or UAT.
* Callback URL: For use if using OAuth 2.0 Web Server Flow. The callback URL must be registered at the time of provisioning your keys and will be associated with the provisioned Client ID.

Please reach out to [CLM Technical Support](https://support.docusign.com/s/contactSupport) to make changes to an existing registration, highlighting what specifically needs to be changed.

Note that API Keys provisioned for the SOAP API are different than the ones used for the REST API and must be requested separately.

## Docs

- [Authentication: OAuth2.0 web server flow](https://developers.docusign.com/docs/clm-api/clm.cm/clm101/authentication/oauth2-web-server-flow.md)
- [Authentication: Salesforce client flow](https://developers.docusign.com/docs/clm-api/clm.cm/clm101/authentication/salesforce-client-flow.md)
- [Authentication: API User Authentication Flow](https://developers.docusign.com/docs/clm-api/clm.cm/clm101/authentication/api-user-authentication-flow.md)