Connect Anaplan with OAuth 2.0 (Device Grant) – StackOne Hub

​

Create a Device grant OAuth client

Sign in to Anaplan as a tenant security administrator.

• Select Administration from the top-left navigation menu.
• Select Security > OAuth Clients, and select Enable OAuth if this is the first time.
• Select New, enter a Name, and select Device grant from the Type dropdown.
• Allowed callback URLs is required by the form but unused for a device client - enter any valid URL, for example https://anaplan.com.
• Set the refresh token behaviour. Non-Rotatable tokens never expire, so the connection never needs re-authorising - this is the recommended setting for StackOne. Rotatable tokens expire after the maximum lifetime you set (43,000 seconds by default), after which the account must be re-linked by hand.
• Select Create client and copy the Client ID.

​

Complete the device authorisation once

Run these two calls yourself to turn the Client ID into a refresh token. Replace the host with the OAuth service URL for your region (see the field description below).

POST https://us1a.app.anaplan.com/oauth/device/code
Content-Type: application/json

{"client_id": "<your client id>", "scope": "openid profile email offline_access"}

POST https://us1a.app.anaplan.com/oauth/token
Content-Type: application/json

{"grant_type": "urn:ietf:params:oauth:grant-type:device_code",
 "device_code": "<device code from step 1>",
 "client_id": "<your client id>"}