OAuth

An open standard for delegated authorization. Common pattern for connecting third-party SaaS apps without sharing passwords.

Frequently asked questions

Why does OAuth matter for sales tools?
Because connecting third-party SaaS apps without sharing passwords is now standard expectation. OAuth lets users grant scoped, revocable access to specific functions, which security reviews require.
What's the difference between OAuth and API keys?
OAuth uses short-lived tokens tied to user identity; API keys are usually long-lived and tied to a service account. OAuth is better for user-context apps; API keys are simpler for server-to-server.
Is OAuth required for enterprise sales tool buyers?
Increasingly yes. Many enterprise security reviews now flag long-lived static API keys. Tools that only support API keys may get filtered out at procurement before functionality is even evaluated.
What's the biggest OAuth implementation pitfall?
Token expiration handling. Apps that don't gracefully refresh expired tokens silently break user sessions and require re-authentication. The fix is straightforward but easy to forget.
What's the migration cost from API keys to OAuth?
For a single vendor relationship: usually a half-day of engineering work. Across a full RevTech stack: 1 to 2 weeks. The blocker is scoping the token permissions correctly, not the technical migration. Procurement increasingly requires OAuth, so the migration is becoming non-optional for enterprise sales tools.