---
schema_version: "1"
id: 83332571ead870305a5ae82dacc52dc8da04dcdb2a3119b5285d76cfdc2dfd15
title: Create Web Authorization Token
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rt_pos_settings_web_auth_token.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rt_pos_settings_web_auth_token.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e2b54c487e84a3846dd6458b44bdfca7ec53c9e61241ed7900de44fb76c8f6b0
description: Configure token fields to generate a web authentication token in the Point of Sale (POS) app. This token is then passed as an Authorization header in a later network call.
products:
  - Commerce
release: "264"
---
# Create Web Authorization Token

Configure token fields to generate a web authentication token in the Point of Sale (POS) app. This token is then passed as an Authorization header in a later network call.

![Web Authorization Headers](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-retail-264-0-0-production-enus/17d647fb-8988-49fb-9add-c4f4cc79c9e4/retail/images/rt_pos_settings_web_auth_token_headers.png)

Prerequisites

- Modern POS App Build: 5.12.2 21098 or greater
- Platform Support: iPhone & iPad
- Offline Support: no
- Technical Prerequisites: An endpoint that is used to generate a token using a POST call

## Turn On App Settings

1. In CMS, go to **Apps** and edit your app configuration.
2. Go to **Modules > Settings**.
3. Under **Web Token URL**, enter the token service endpoint.
4. Under **Web Token Scope**, enter the scope of the token permission passed in the request as _"resource"._
5. Under **Web Token Grant Type**, enter the token type passed in the request as _"grant\_type"._
6. Under **Web Token Client ID**, enter the client ID to call the token service passed in the request as _"client\_id"._
7. Under Web Token Client Secret, enter the client ID to call the token service passed in the request as "client\_secret".![The App Settings for Web Auth Tokens in Point of Sale CMS.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-retail-264-0-0-production-enus/17d647fb-8988-49fb-9add-c4f4cc79c9e4/retail/images/rt_pos_settings_web_auth_token_app_settings.png)

## Configure Web Auth Token Deep Link

1. Edit a layout cell or hamburger menu.
2. Using the deep link picker, select the URL as the deep link type.
3. Add the URL for which the generated token will be passed in the Authorization header. Append a query parameter at the end of the URL with the key "**token**" and value "**1**" (**token=1**).![Selecting a Deep Link for Web Auth Tokens in Point of Sale CMS](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-retail-264-0-0-production-enus/17d647fb-8988-49fb-9add-c4f4cc79c9e4/retail/images/rt_pos_settings_web_auth_token_deep_links.png)

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-retail-264-0-0-production-enus/17d647fb-8988-49fb-9add-c4f4cc79c9e4/images/icon_note.png)

Note Select a customer for the web authentication token call to work.

## Known Issues & Restrictions

The keys for the token generation request are hard-coded in the app and can't be configured in Point of Sale CMS. These values are "**resource**", "**grant\_type**", "**client\_id**", "**client\_secret**".

## Frequently Asked Questions (FAQs)

What determines whether a new token is generated?

If the POS is about to open a web URL deeplink configured for token authentication (indicated by `token=1` in the URL), the app generates a new token and includes it in the web URL request.

How long does a token last?

Tokens are for one-time use only. The app doesn't save the token and regenerates a new one each time the web URL deeplink is launched from the POS.