> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect SAP Fieldglass with OAuth 2.0 (X.509 Certificate) – StackOne Hub

> Link a SAP Fieldglass account in the StackOne Hub using OAuth 2.0 (X.509 Certificate). End-user guide to authorize the integration and start using SAP Fieldglass actions.

> [!WARNING]
>
> A user with the Configuration Manager role must register the certificate in SAP Fieldglass before the connection can be made.

## Register your certificate

Certificate authentication links a public certificate to a valid, active SAP Fieldglass user,\
so no username or password is sent with the token request.

**1. Register the certificate in Configuration Manager**

Obtain the public certificate to be used for authentication, then sign in to\
[SAP Fieldglass](https://help.sap.com/docs/SAP_FIELDGLASS_INTEGRATION)\
with the **Configuration Manager** role and choose the **Manage Crypto Assets** tile. The\
**Encryption Keys and Certificates** page opens.

<ul>
  <li>Use an X509 certificate issued by a trusted Certificate Authority (for example, DigiCert) or the SAP Cloud Root Certificate Authority.</li>
  <li>Choose **New**. The **Create Asset** page opens.</li>
  <li>**Category**: **X509**</li>
  <li>**Public Certificate**: the full certificate text, including the Begin Certificate and End Certificate lines</li>
  <li>**Notification Email ID**: the email contact to notify when the certificate is about to expire</li>
  <li>Choose the **Auto-Activate** option to make the certificate immediately active.</li>
  <li>Under **Extended Key Usage**, link the certificate to a valid, active user.</li>
  <li>Choose **Create** to save the certificate in SAP Fieldglass.</li>
</ul>

**2. Copy the certificate and private key**

Copy the **Certificate** and the matching **Private Key** across. Include the full contents of\
each, with their Begin and End lines.

**3. Find your environment URL**

The **Environment URL** is the hostname of your SAP Fieldglass environment, without the\
protocol and without a trailing slash. Read it from the address bar while signed in to\
SAP Fieldglass.

<ul>
  <li>Format: `<company>.fgvms.com`</li>
  <li>Example: `www.fieldglass.net`</li>
</ul>

**4. Find your authentication URL**

The **Authentication URL** is a separate host used for the token request. The company name\
that is part of it is followed with "-auth".

<ul>
  <li>Format: `<company-code>-auth.<region>.fieldglass.net`</li>
  <li>Example: `acme-auth.eu.fieldglass.net`</li>
  <li>Not all test environments are configured for certificate authentication. You may need to submit a request to have it configured.</li>
  <li>**Application Key**: the **X-ApplicationKey** value, optional for Connector, Identity (SCIM), and Reporting APIs.</li>
</ul>

## Link the Account

**1. Connect**

<ul>
  <li>Click **Connect**.</li>
  <li>If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.</li>
  <li>Once authorization is successful, you will see a confirmation popup.</li>
</ul>

**2. Use Actions**

Connect an AI platform to the linked account's actions. See [AI Platforms](https://docs.stackone.com/connect/ai-platforms/overview.md).

Other ways to call actions are listed in [Protocols & SDKs](https://docs.stackone.com/connect/protocols-and-sdks.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.