> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Zoho Bigin OAuth 2.0 connector profile – StackOne setup guide

> Set up the OAuth 2.0 connector profile for Zoho Bigin in StackOne. One-time admin setup required before your users can link Zoho Bigin accounts via Hub.

> [!WARNING]
>
> You need a Zoho account that can open the Zoho API Console. The client only asks for read scopes, and the Client Secret must stay private.

Select Actions to adjust the guideSome actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.

Select all
Clear

ActionScope(s)

Loading actions...No actions match your search.

Dynamic Guide URL

Copy URL

Scopes Selected

<pre role="textbox" aria-readonly="true" tabIndex="0" />

Separator

Copy scopes

## Register a client in the Zoho API Console

The client is the Zoho app StackOne uses to ask each Bigin user for read access.

**1. Sign in to the Zoho API Console**

Sign in to the [Zoho API Console](https://api-console.zoho.com) with your Bigin account.

<ul>
  <li>If you have not registered a client yet, click **GET STARTED**.</li>
  <li>If you already have one, click **+ ADD CLIENT**.</li>
</ul>

**2. Choose the client type**

In the **Choose a Client Type** window, click **CREATE NOW** on the **Server-based Applications** card.

**3. Enter the client details**

Fill in the fields and click **CREATE**.

<ul>
  <li>**Client Name**: the name of your application, such as your product name</li>
  <li>Your customers see this name in the Connected Apps list of their Zoho account. Avoid special characters in the name, except underscores and ampersands.</li>
  <li>**Homepage URL**: your company website</li>
  <li>**Authorized Redirect URIs**: `https://api.stackone.com/connect/oauth2/zohobigin/callback`</li>
  <li>Paste the redirect URI exactly. Zoho refuses the authorization when it differs from the registered one.</li>
</ul>

**4. Copy the Client ID and Client Secret**

Open the **Client Secret** tab of your client and copy the **Client ID** and the **Client Secret**.

<ul>
  <li>Paste the Client ID into the **Client ID** field in the StackOne Connector profile.</li>
  <li>Paste the Client Secret into the **Client Secret** field in the StackOne Connector profile.</li>
  <li>To see them later, sign in to the console, select your client and open the **Client Secret** tab again.</li>
</ul>

**5. Enable other data centers**

If any customer signs in to Bigin from a data center other than the one your client is registered in, open the **Settings** tab of your client and switch on each of those data centers.

<ul>
  <li>Select **Use the same OAuth credentials for all data centers**. Zoho gives each enabled data center its own secret by default, and the StackOne Connector profile stores one Client Secret.</li>
  <li>A customer whose data center is not switched on cannot authorize.</li>
  <li>With the checkbox cleared, a customer in a switched-on data center fails to connect, because Zoho expects that data center's own secret.</li>
  <li>To serve customers in every data center, switch on all of them.</li>
  <li>The **Settings** tab has no China data center. A customer on China (CN) can authorize only through a client registered in the [Zoho API Console for China](https://api-console.zoho.com.cn).</li>
</ul>

## Choose the OAuth Scopes

The **OAuth Scopes** field lists the Bigin scopes StackOne asks for, separated by commas.

<ul>
  <li>Leave it empty to request the four read scopes below. Every action needs one of them, and none needs more.</li>
  <li>If you enter your own list, keep `ZohoBigin.users.READ` and `ZohoBigin.org.READ`. The connection test reads users and the organization and fails without them.</li>
  <li>Without `ZohoBigin.settings.roles.READ` and `ZohoBigin.settings.profiles.READ`, listing roles and profiles fails.</li>
  <li>Every scope you enter must be one Bigin offers, otherwise Zoho refuses the authorization.</li>
</ul>

**1. Review the scopes**

Enables actions: Check User Access, Get Current User, Get Organization, Get Profiles, Get Roles, Get Unified Credentials, Get Unified Role, Get Unified User, Get User, Get Users, List Unified Roles, List Unified Users

Reading users, roles, profiles and the organization needs these scopes. All of them are read-only.

<ul>
  <li>
    ZohoBigin.users.READ
  </li>

  <li>
    ZohoBigin.settings.roles.READ
  </li>

  <li>
    ZohoBigin.settings.profiles.READ
  </li>

  <li>
    ZohoBigin.org.READ
  </li>
</ul>

## Know how access lasts

An access token lasts up to one hour and StackOne refreshes it automatically. Zoho sets no expiry on refresh tokens.

<ul>
  <li>A user can revoke StackOne's access at any time. They sign in to [Zoho Accounts](https://accounts.zoho.com) (on the China data center, [Zoho Accounts China](https://accounts.zoho.com.cn)), click **Sessions** in the left menu, scroll to **Connected Apps**, hover over the app, click **Revoke Access**, then click **Yes, Proceed**.</li>
  <li>After a revoke, the connection fails at once and the customer must connect their account again.</li>
</ul>

## Creating the StackOne Connector Profile

To create the Connector Profile in StackOne for **Zoho Bigin**:

**1. Open the connector**

Log in to StackOne, open [Connectors](https://app.stackone.com/connectors), and select **Zoho Bigin**.

**2. Choose actions and events**

<ul>
  <li>Click **Add Profile**.</li>
  <li>If the connector offers more than one authentication method, set the **Auth Method** filter to **OAuth 2.0**.</li>
  <li>Select the actions, and any events, to enable for this Connector Profile.</li>
  <li>Click **Continue**.</li>
</ul>

**3. Set up authentication**

<ul>
  <li>Select **Authentication Type** as **OAuth 2.0**.</li>

  <li>
    Fill out the fields using details retrieved from your provider:

    <ul>
      <li>**Client ID**</li>
      <li>**Client Secret**</li>
      <li>**OAuth Scopes** (Optional)</li>
    </ul>
  </li>

  <li>Click **Create Profile**.</li>
</ul>

Congratulations! The new Connector Profile now shows up on the connector page. If you created it as a project member rather than an admin, it starts disabled until a project admin enables it. You can now continue to [Link Accounts](https://docs.stackone.com/connect/managing-connectors/linking-accounts.md) for **Zoho Bigin**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.