Skip to navigation
Platform 101Authenticate

Choose OAuth Type

View as Markdown

Docusign provides four flows for implementing OAuth:

  • If each user of your integration will use a single system account to log in, you should use JWT Grant. Note that, when using JWT Grant to obtain an access token, you can still use elements of the other grants to obtain consent.
  • If your integration will not use a single system account to log in, it should use Public Authorization Code Grant or Confidential Authorization Code Grant.
  • A fourth flow, Implicit Grant, is supported for integrations that cannot secure a secret, but is not recommended. Public Authorization Code Grant should be used instead whenever possible.

Each of these flows has its own advantages, drawbacks, and is intended to support different types of integrations.

If your integration…Recommended OAuth flowReason
Manages large numbers of users via Docusign Admin…JWT GrantWhen used with Docusign Admin, JWT Grant enables you to obtain consent for all users within an organization’s domain simultaneously.
Uses a single system/organization user for all users in your integration, rather than individual employee users…JWT GrantWhen used with Docusign Admin, the JWT Grant flow enables you to obtain consent on behalf of all users in an organization’s domain.

This enables your integration to avoid refresh token management and having to obtain consent frequently.
Uses a browser or client to make requests of a web server…JWT Grant, Confidential Authorization Code Grant or Public Authorization Code GrantNote that the Confidential Authorization Code Grant flow requires that your integration be able to store your client secret on a secure web server.
Is only able to use local storage or is otherwise unable to secure a secret key…Public Authorization Code Grant or Implicit GrantThe Public Authorization Code Grant flow enables you to store your access token directly on a user’s device.
Must be as secure as possible…Confidential Authorization Code Grant or Public Authorization Code GrantThe Authorization Code Grant flows are the most secure options for implementing authentication.
Should be as easy to implement as possible…Public Authorization Code GrantThe Public Authorization Code Grant flow is the most straightforward general-use flow to implement for most integrations.

Next steps