Skip to main content
Requires a Domain Admin account and an Internal Application registered on the Egnyte Developer Portal for the customer’s Egnyte domain. The Egnyte plan must be an eligible plan — Trial, Legacy Office, or Team plans are not supported. Egnyte recommends this flow only for trusted, first-party integrations; use the OAuth 2.0 (Public Application) flow for multi-tenant integrations.

​
Register an Internal Application on the Egnyte Developer Portal

To connect Egnyte with StackOne using the Resource Owner Password Credentials grant, you need to create an Internal Application on the Egnyte Developer Portal. This will generate the API Key and API Secret required for integration, which map to client_id and client_secret in the token request.

1

Sign in to the Egnyte Developer Portal

Open your browser and navigate to the Egnyte Developer Portal. Click Sign In in the top-right corner, then enter your Email and Password and click SIGN IN. Use an account tied to an active Egnyte Domain Admin — API keys requested by a non-admin will be declined.

Egnyte Developer Portal sign-in form with Email and Password fields
2

Open the Apps page

Click your account email in the top-right corner to open the account dropdown, then click Apps. You land on the My Apps page.

Account dropdown showing the Apps menu item on the Egnyte Developer Portal
3

Create a new App

On the My Apps page, click + NEW APP in the top-right corner to open the New App form.

My Apps page with the + NEW APP button in the top-right
4

Fill in the app details

Complete the Overview section of the New App form. The Registered OAuth
Redirect URI field is not required for Internal Applications — leave it blank — and
Current User Base and Platform can stay at their defaults.

  • App Name — a display name for the app (for example, Internal Integration).
  • Description — a short description of the integration.
  • Egnyte Domain — the customer’s Egnyte subdomain, without the .egnyte.com suffix. For example, from https://acme.egnyte.com enter acme. Trial domains are not eligible for API keys.
  • App Icon URL (optional) — URL to an image file (PNG, max 100px by 100px).
  • Type — choose Internal Application (own company use only). This enables the Resource Owner Password Credentials grant on the issued key. The Redirect URI is only used by Publicly Available Application — leave it blank here.
Egnyte New App form showing App Name, Description and Additional Information fields
5

Request access to the APIs

Enables actions: Add Comment, Chunked Upload By File ID, Create Group, Create Link (v1), Create User, Delete Comment, Delete File Or Folder (v2), Delete File Or Folder By ID, Delete Group, Delete Link (v1), Delete User, Download File Content By ID, Download File Content By Path, File Or Folder Operation (v2), File Or Folder Operation By ID, Get Comment, Get Effective Permissions For User, Get Events Cursor, Get File Or Folder Metadata (v2), Get File Or Folder Metadata By ID, Get Folder Statistics By ID, Get Group, Get Link (v1), Get User, Get User Info, List Comments, List Events (v2), List Groups, List Links (v2), List Trash Contents (v2), List Users, Modify Folder Options, Partially Update Group, Replace Group, Restore Or Purge Trash Items, Search Files And Folders (v2), Update User, Upload File Content By Path

Scroll to the APIs section and click Request on the row for Prod Collaborate — this API grouping covers filesystem, comments, links, permissions, users, groups, search, trash, and events. Also request Prod_SnG if the integration needs Secure & Govern APIs. Enable the scopes required for your use case:

APIs section on the New App form showing Prod Collaborate with the Request button
6

Save the app

Click SAVE at the bottom-right of the form. For Internal Applications Egnyte issues the API Key and API Secret immediately with Status: Approved — no external review queue applies to internal keys on eligible plans.

7

Copy the API Key and API Secret from Egnyte

Open the app from My Apps and scroll to the API Keys section.

  • In the Key column, click Copy API key — sent as client_id in the token request.
  • In the Secret column, click Show secret, then click the copy icon — sent as client_secret. All Egnyte keys issued after January 2015 require a secret.
App profile API Keys section with Copy API key and Show secret controls
8

Paste the credentials on the StackOne Linked Account

Enter the values copied from Egnyte.

  • Egnyte API Key → StackOne Client ID.
  • Egnyte API Secret → StackOne Client Secret.

​
Find the Egnyte Domain

Every Egnyte account is scoped to a unique subdomain of egnyte.com. StackOne needs that subdomain to build the token URL (https://{domain}.egnyte.com/puboauth/token) and every subsequent API endpoint.

1

Sign in to the Egnyte account

Open https://<customer-domain>.egnyte.com in your browser — this is the same subdomain entered as Egnyte Domain on the New App form in the previous section (e.g. acme → https://acme.egnyte.com).

2

Locate the Egnyte subdomain

On the Egnyte Sign in page (and in the browser address bar) you will see the workspace URL. The part before .egnyte.com is the Egnyte Domain. For example, if the sign-in page shows app4stackone.egnyte.com, the Egnyte Domain is app4stackone.

  • Enter only the subdomain part — omit any scheme prefix, the .egnyte.com suffix, and any trailing path.
  • The domain contains only letters, numbers, and hyphens — no spaces or special characters.
  • Trial domains are not eligible for the Egnyte Public API.
Egnyte tenant sign-in page showing the workspace name and the tenant subdomain
3

Enter the domain on the StackOne Linked Account

Paste the subdomain into the Egnyte Domain field on the StackOne Linked Account.

​
Prepare Domain Admin credentials for the password grant

The Resource Owner Password Credentials grant exchanges a Domain Admin’s username and password for a token pair. Prefer a dedicated integration user account so token revocation doesn’t disrupt individual admins, and rotate the credentials if they are ever exposed.

1

Confirm the account is a Domain Admin

Only Domain Admins can be exchanged for tokens with the required API scopes. In the Egnyte web UI, open Settings → Users & Groups, click Details on the user, open the Profile tab, and confirm User Type is Administrator — see Egnyte’s Change User Type guide to promote them if not.

2

Record the Domain Admin username and password

These are the web-UI sign-in credentials — not an email address and not an API key. Prefer a dedicated integration account so revoking the token doesn’t lock out a person.

  • Username — the login username shown in Settings → Users & Groups.
  • Password — the same one used to sign in to the Egnyte web UI. Reset it from the sign-in page if it isn’t known.
3

Enter the credentials on the StackOne Linked Account

Paste the Domain Admin username into the Egnyte Username field and the password into the Egnyte Password field. These values are sent as username and password in the grant_type=password request to /puboauth/token. If Egnyte returns a 403 INVALID_USERNAME_OR_PASSWORD error, retest with a password that has no special characters — Egnyte docs flag form-encoding edge cases here.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Egnyte Domain
  • Client ID
  • Client Secret
  • Egnyte Username
  • Egnyte Password
  • OAuth Scopes (Optional)
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.

​
Next Steps

Webhooks setup

Configure receiving Events for Egnyte into StackOne.