Skip to main content

OAuth 1.0 deprecation - Migrate to OAuth 2.0 Now!

 OAuth is a security protocol Xero uses to let your app access a user’s account without accessing the password. The application user approves the access token upon requests for permissions. OAuth 2.0 enhances the security standards and improves the security connection between third-party applications and Xero API.

Applications using Xero third-party integration services need to migrate to OAuth 2.0 by the 31st of March 2021. Delaying the Xero Oauth migration may cause errors while requesting API requests and lose the ability to sync your application data with Xero.

OAuth 2.0 uses a per-user basis access token, while in OAuth 1.0, token where issues per organization. Users can still select which organization an app can access, and a different token will handle the same. OAuth 1.0 Migration to OAuth 2.0 proves more benefits in improving the end-user experience and also makes it easier for businesses to connect with apps.

Here is how OAuth 2.0 benefits:

  • Highly secure and meets the API industry standards
  • Better certification
  • Enable Xero Sign-in
  • App partner program benefits
  • Ensures regulatory requirements in all regions
  • Hassle-free and quick setup
  • Better customer experience

Connect with us to get your applications migrated to OAuth 2.0 and enhance your applications’ security standards.

The migration details depending on your API type

Partner apps

  • Migration guide: The FAQs and endpoint guide are available for all partner apps, and a sample is available on the GitHub page.
  • Feedback and benefits: Migrating to OAuth 2.0 provides a smoother experience and ensures your applications retains in the Xero app partner program. We recommend getting migrated on priority.

For accountants and bookkeepers

  • Xero Marketplace apps: Partner applications have a seamless migration path and will not affect the client applications.
  • Custom integrations (Private apps): You will need to move to OAuth 2.0 if you have a custom API integration to access your client’s Xero data.

App users

  • Xero Marketplace apps: Partner applications have a seamless migration path and will not affect the client applications.
  • Custom integrations (Private apps): If your custom-built app is connected to the Xero organization, you need to migrate to OAuth 2.0 by the end of this year.

Private apps

  • Unlike OAuth 1.0, you no longer need to worry about offline access, multiple organization connections, and certifications. You can simply choose the OAuth 2.0 library and start building your application
  • Machine to machine (M2M): As all the Xero OAuth2.0 apps allow offline access to be granted, it is possible to set up M2M integrations. Only the initial authorization code flow requires a user and a web browser.
  • Refresh tokens: A refresh token is the only thing required for user interaction. Refresh ones in 30 days needed to maintain the connection.
  • Connecting your app: The developer and the client will need to connect to the Xero organization after creating a new OAuth 2.0 app.

What’s in with the new update?

  • No more long-lived tokens.
  • Support for a short-lived token to maintain a high level of security.
  • Enhanced privacy and transparency
  • Apps can connect to multiple(up to 25) organizations and maintain offline access.
  • No support for client credentials grants type.
  • Supporting and owning more SDKs

Here is how Infomaze can help with the migration:

Infomaze works following client’s applications and industry standards. We understand that every application/software requires frequent updates to match with the latest technological offerings.

At Infomaze, we keep a keen eye on such updates and ensure we diligently help our clients update their systems. Developers at Infomaze ensure that your applications are up-to-date, secure, and meets the industry standards. We can help you seamlessly migrate your Xero API connection’s from OAuth 1.0 to OAuth 2.0…Click The Below Link For More Details.

Source: Migrate Xero OAuth 1.0 to OAuth 2.0 Now!


Labels:

Comments

Post a Comment

Popular posts from this blog

Hire Best Bookkeeping Service Providers

  Bookkeeping is made simple with our Offshore Bookkeeping Services When it comes to managing your business, every aspect of your back-office operations matters as much as your front office, and having organized bookkeeping is one of the factors that take you a long way. However, while bookkeeping is highly significant, it is unavoidably a time-consuming process, and that is where outsource bookkeeping services aid in running your business with ease. Hire an experienced bookkeeper or a bookkeeping team from an offshore bookkeeping company. Through outsourced bookkeeping services that are fully automated, cost, and time-effective , get the maximum benefit of staying organized and always informed of your finance and accounting. With proficiency in all the major accounting software and industry-specific customizations, we deliver a bookkeeping strategy and customer-employee-centric reports that your business requires. The Outsourced Bookkeeping Services we offer While we underst...
Post a Comment
Read more

PCI Security Standard Compliance and Integration

PCI (Payment Card Industry) DSS (Data Security Standard) is a security standard developed and maintained by the PCI council. Anyone who has access to the internet has come across PCI DSS at least once. PCI (Payment Card Industry) Security Standard is an information security standard for organizations handling branded credit cards from major card schemes. PCI security standards council was founded by the top 5 credit card companies that set standards and mandated it for any business that handles, processes or stores credit cards — regardless of their size and location to be PCI compliant. The key to achieve PCI-DSS (Payment Card Industry Data Security Standard) compliance in a cost-effective manner is to establish the right scope for the credit card handling infrastructure of an organization. The US government has mandated PCI compliance on all online storefronts/websites/applications that make use of credit card to safeguard financial data of the end-users and manufa...
Post a Comment
Read more

Outsourcing IT Help Desk Services Can Reap More Benefits

  How did the graveyard shift for one IT Major helped them cut costs and provide efficient services to its customers? Infomaze has taken over the graveyard shift or night support of an IT major in the US to provide continuous, uninterrupted IT Help Desk Support to its customers.  The service includes a full 360-support, including taking over the tickets that are still open, processing new, and passing enough information to the next shift to process any pending tickets.  The IT Support solution provided will soon be extended to 24X7 support as it has saved costs and has resulted in better processing time than ever before. The Customer: An IT Service Provider The client, an IT service provider who provides 24×7 support to their customers, was — looking for an efficient way to keep the IT Support Services seamless without affecting the quality of their solutions and increasing customer satisfaction. The Problem: Reduced quality of IT services offered The client had...
Post a Comment
Read more