---
schema_version: "1"
id: 34d24e30f48c4528d008f09ab3c80c6394e2904238b81f1aa4e2014dacb14c3a
title: Set Up Authorization
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/einstein-vision-language/einstein/guides/Einstein-Language/set-up-auth.md
canonical_url: https://developer.salesforce.com/docs/analytics/einstein-vision-language/guide/set-up-auth.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 37ae08fd715e4333088cd9c038516f6e33da1d03c16091bb8f84bf3b899a74f3
products:
  - Einstein Vision and Language
  - Einstein Vision and Language Repo
---

# Set Up Authorization

The Einstein Vision and Language APIs use OAuth 2.0 JWT bearer token flow for authorization. Use the [token page](https://api.einstein.ai/web/token) to upload your key file and generate a JWT token.

1. Type your email address or account ID.

- If you signed up using Salesforce, use the email address associated with your user in the Salesforce org you logged in to when you signed up.
- If you signed up using Heroku, use the account ID contained in the `EINSTEIN_VISION_ACCOUNT_ID` config variable.

2.  Click **Browse** and navigate to the `einstein_platform.pem` file that you downloaded when you signed up for an account.

**tip:** The key file was previously named `predictive_services.pem`. If you signed up at an earlier time and you can't file your key file, try searching for a file by this name.

3.  Set the number of minutes after which the token expires.

4.  Click **Get Token**. You can now cut and paste the JWT token from the page.

![TokenPageWithToken](https://developer.salesforce.com/media/token_page_with_token.png)

This page gives you a quick way to generate a token. In your app, you'll need to add the code that creates an assertion and then calls the API to generate a token. See [Generate an OAuth Token](/docs/analytics/einstein-vision-language/references).

**tip:** The token you create when you use this site doesn't automatically refresh. Your application must refresh the token based on the expiration time that you set when you create it.