White-labeled OAuth of an Integry-Supported App (Deployment) – Integry

When you make a flow in Integry using a pre-built app (eg. Hubspot), your users will see Integry's name and/or logo on the auth screen for that app. That's because the flow is using Integry's developer app in that app's platform to authenticate your user. If you want to show your app's branding instead, you can white-label the OAuth by using your developer app credentials.

Using this guide, you will white-label OAuth for HubSpot by creating a developer app in your HubSpot developer account. Skip to step 10 if you already have one, and adding the developer app credentials in Integry.

Go to HubSpot's developer site.
Enter your login credentials.
- If you don't have a developer account on HubSpot, you can create one for free.
Go to Apps.
Click "Create app".
In the "App Info" tab, enter your app's name.
- The name you enter here will appear on the authentication and authorization screens when your users will set up a flow with HubSpot.
Upload your app's logo.
- The logo you upload here will appear on the authentication and authorization screens when your users will set up a flow with HubSpot.
Go to the Auth tab and enter https://app.integry.io/auth/redirect/ as the redirect URL.
- When your users connect their HubSpot account while setting up the integration, they will be taken to HubSpot's authentication server. After being verified by the authentication server, they will be redirected to the above URL.
Scroll down to select scopes.
- Scopes will determine the permissions to read/write data from/in your HubSpot account.
- Select the following scopes:
  - crm.schemas.deals.readcrm.objects.contacts.readcrm.objects.contacts.writecrm.objects.companies.readcrm.objects.companies.writecrm.lists.readcrm.lists.writecrm.objects.deals.readcrm.objects.deals.writecrm.schemas.contacts.readcrm.schemas.companies.readcontentoauth
- Copy each scope and paste it in the search bar.
- Select the "read" or "write" permission by clicking the checkbox. Your selected scope will be added.
- This is how the permissions section will appear on the authorization screen for your users.
Click on Create App. When your app is created, a "Client ID" and "Client secret" will be generated for your developer app. Go to the "Auth" tab to copy your Client ID and Client secret. You will use these credentials while configuring white-labeled OAuth in Integry.
Log into Integry and go to "Deployments".
Click on your live marketplace deployment.
Go to "Apps" from the left menu.
Move your mouse over to HubSpot.
Click on "Configure".
Select the second option to white-label OAuth.
Enter your Client ID, Client secret, and scopes in the respective fields.
- The scopes you enter here should match with the scopes you select in your developer app.
- Copy scopes from here: content oauth crm.schemas.deals.read crm.objects.contacts.write crm.objects.companies.write crm.lists.write crm.objects.companies.read crm.lists.read crm.objects.deals.read crm.schemas.contacts.read crm.objects.deals.write crm.objects.contacts.read crm.schemas.companies.read
Click Test.
- As a result, an authentication UI opens up in your browser.
- After a successful login, an authorization UI opens in your browser. The permissions you see here are the scopes you selected while creating your app. Click on Connect app.
If your test is successful, you'll see a green tick.
In case of an error, you'll see an error icon, click "See details" to view error details.
- You'll see the steps performed by Integry on behalf of Doneday to authenticate and authorize the user. Check the Network Code to see which step failed.
- Click "View Payload" to see the details of the API call and troubleshoot accordingly. Here are some potential error messages you may encounter:
  - - invalid_grant: Indicates that the OAuth client key or secret is not properly configured with the necessary grants or scopes
    - BAD_CLIENT_SECRET: Indicates an invalid or incorrect client secret was provided
    - Unauthorized: Indicates that the client key or secret provided is not authorized to perform the requested action
Click on Enable to enable white-labeled OAuth in your flows.

Once you've enabled white-labeled authentication, any new users who set up integrations with your flow will see your app's branding instead of Integry's branding while authenticating and authorizing their HubSpot account. However, existing users who set up integrations before the white-labeled OAuth was enabled, will still see Integry branding when they edit or update their integrations and re-connect their Hubspot account.

Follow these steps to white-label OAuth for any third-party app in your marketplace.