> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # Connect Cornerstone with OAuth 2.0 – StackOne Hub > Link a Cornerstone account in the StackOne Hub using OAuth 2.0. End-user guide to authorize the integration and start using Cornerstone actions. Ensure that your Cornerstone account has Admin privileges.
Select Actions to adjust the guide
Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.
Action
Scope(s)
Loading actions...
Dynamic Guide URL
Scopes Selected

          

            
Separator

Generate Client ID and Secret key

To connect Cornerstone with StackOne, you'll need to register an OAuth 2.0 application in your Cornerstone portal.

Sign in to your Cornerstone account.

Navigate to Admin > Tools > Edge > API Management.

On the Manage Applications tab, click Register New Application.

Provide the required application information.

  • Application Name: Enter a descriptive name (e.g., StackOne Integration)
  • User ID: Enter the User ID of an active user in your portal
Enables actions: Assign Training, Catalog Search, Complete Training, Create Express Class, Create Learning Object, Get Approvals, Get Assigned Trainings, Get Inbox Items, Get Learning Assignment, Get Learning Object Details, Get Remaining Assignment Count, Get Sessions, Get Suggested Trainings, Get Tasks, Get Transcript Curricula Child Details, Get Transcript Enhanced Details, Get Transcripts (Legacy), List Users, Search Learning Assignments, Search Transcripts, Update Transcript Progress

In the Scopes section, select the scopes you want to associate with your application. The scopes below are the ones this connector uses — select every scope for the actions you intend to call.

Click Register Application to complete the registration process.

If the User ID is valid, you'll receive your Client ID and Client Secret. Store these credentials securely for use later.

  • ⚠️ The Client Secret will only be shown once and cannot be retrieved later. If lost, you'll need to regenerate it.

Configure User Permissions

Ensure the user associated with your OAuth application has the necessary permissions.

Navigate to Admin > Tools > Core Functions > Users and search for the user which is associated with the Application you created in the previous step.

Click on Options > Permissions. Ensure the following permissions are configured to either `There are no constraints available for this permission.` or `Restrict to User's Corporation.`

  • Reporting API - Read only
  • Transcript API - Request
  • Transcript API - View
  • Employee API - View
  • Learning Assignment API - View

Find Your Company Domain

Your Company Domain is the subdomain part of your Cornerstone URL.

When logged in to your Cornerstone account, look at the URL in your browser.

  • Example: If your URL is `my-company.csod.com`, your domain is `my-company`
  • Enter only the subdomain part (without `.csod.com`)

Troubleshooting

Common issues and how to resolve them.

This error message indicates that the API you are trying to access is not enabled in your Cornerstone portal. To resolve this error, follow these steps.

  • Navigate to Admin > Tools > Edge > Integrations > Manage APIs within your Cornerstone portal.
  • Ensure the toggles for Cornerstone API and Reporting API are turned on.
  • If the toggles are already turned on, try turning them off and then back on again. This action resets the backend settings that control access to Cornerstone's APIs.
  • After performing the above steps, if you still see the same error response, please log a case with Cornerstone Global Customer Support (GCS).

There are a few things you should check when you receive this response.

  • Verify that the Reporting API is enabled for the environment that you are trying to pull data from. Navigate to Admin > Tools > Edge > API Management > Manage APIs. You should see the Reporting API enabled on this page.
  • If using OAuth 2.0: Ensure that the user account associated with your registered OAuth 2.0 application has the Reporting API - Read only permission.
  • If using OAuth 2.0: Ensure that your OAuth 2.0 application has the required scope to access the endpoint that you are trying to retrieve data from.
  • If using OAuth 2.0: Ensure that the OAuth 2.0 access token is still valid. Remember that OAuth 2.0 access tokens are valid for an hour by default, unless you set a different validity period for your application in the API Management page in Edge.
  • After performing the above steps, if you still see an 'unauthorized access' error, please log a case with Cornerstone Global Customer Support (GCS).

Linking the Account from the Hub

Use one of the three Linking Account Methods to access the Hub. Fill out the following fields using details from your provider:
  • Client ID
  • Client Secret
  • Company Domain
  • Application Scopes (Optional)
  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.

## Next Steps

Configure receiving Events for Cornerstone into StackOne.

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.