---
schema_version: "1"
id: d6bd7547ec3f22eb824064a8444c5dfc23eb451a72d043863ef3cbba8102c64a
title: Authorization
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/industries-integrations/comms/guides/authorization.md
canonical_url: https://developer.salesforce.com/docs/industries/communications/guide/authorization.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 8c2be79e59a53daa4b2dd1c5b509a0685be07eafce4666c945b93b5eda466c4e
products:
  - Communications Cloud TM Forum API
  - Industries Integrations
---
# Authorization

For a client application to access REST API resources, it must be authorized as a safe visitor. To implement this authorization, use a connected app and an OAuth 2.0 authorization flow.

## Create a Connected App

A connected app requests access to REST API resources on behalf of the client application. For a connected app to request access, it must be integrated with your org’s REST API using the OAuth 2.0 protocol. OAuth 2.0 is an open protocol that authorizes secure data sharing between applications through the exchange of tokens.  
For instructions to configure a connected app, see [Create a Connected App](https://help.salesforce.com/s/articleView?id=sf.connected_app_create.htm&type=5) in _Salesforce Help_. Specifically, follow the instructions in [Enable OAuth Settings for API Integration](https://help.salesforce.com/articleView?id=connected_app_create_api_integration.htm&language=en_US).

## Generate Access Tokens

OAuth authorization flows grant a client app restricted access to REST API resources on a resource server. Each OAuth flow offers a different process for approving access to a client app, but in general the flows consist of three main steps.

1. To initiate an authorization flow, a connected app on behalf of a client app requests access to a REST API resource.
2. In response, an authorizing server grants access tokens to the connected app.
3. A resource server validates these access tokens and approves access to the protected REST API resource.

After reviewing and selecting an OAuth authorization flow, apply it to your connected app. For details about each supported flow, see [OAuth Authorization Flows](https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&language=en_US) in _Salesforce Help_.