---
title: OAuth 2.0
slug: web-experimentation/docs/oauth-20
docTags: 
createdAt: 2026-07-23T11:40:25.187Z
---

Optimizely Web Experimentation provides the OAuth 2.0 protocol to let you authorize third-party applications to access your data with the REST API. It lets you grant access to an application without sharing your Optimizely username and password. [View and revoke applications you have authorized](docId\:QlcGFoh9mcZPQ88kdONI0) in your account settings.

Optimizely's REST API lets you create and manage Optimizely Web Experimentation projects and experiments and analyze results from other applications. For example, Optimizely's [solutions partners](https://www.optimizely.com/partners/solution/) and [technology partners](https://www.optimizely.com/partners/tech/) use the REST API to

- A/B test headlines from within WordPress.
- Create audiences based on information collected from your Data Management Platform.
- Manage projects from an internal system.
- Pull results data into an internal dashboard or results widget.
- Send email alerts when certain results are achieved.

Applications that are built on the REST API (such as technology integrations) can use OAuth to access data on the customer's behalf by putting them through an authorization flow (similar to how you can log into many accounts using your Facebook or Google login).

## Authorize applications

You can grant trusted third-party applications access to your Optimizely account by logging in through a **Connect with Optimizely** button.

## View authorized applications

You can see a list of third-party applications that you have authorized to access your Optimizely data by going to **Account Settings > Registered Apps** in Optimizely Experimentation.

## Revoke permissions

To unauthorize a third-party application at any time, revoke it from this menu by clicking **Revoke Access** and confirming your decision. When you revoke permissions, you cannot authorize or re-authorize third-party applications from this menu. To do that, you must go back to the app you want to authorize and go through the authorization process again.

## Register applications to use OAuth

To build integrations using Optimizely Web Experimentation's REST API, reference the Optimizely API documentation, which covers the endpoints and calls you can use.

If you want to register an application to access the API with OAuth, complete the following steps:

1. Go to **Account Settings > Registered Apps**.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/vjyDeu5UeDqJilt1GoJ7T_b811c12df9c0190238b058b408769ca0e9a57759df5c7cf2328d7bae31a997bd-image.png)

2. Click **Register New Application**.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/pB6v8nDdeQwTn6yOEi6Th_98618b8c1ff34b88ac6bec56d2138fa9a5910e0ebf77435a43ed4c18be6a9fa3-image.png)

3. Enter the **Application Name** and **Redirect URI** and select a **Client Type** (**Public** or **Confidential**) in the **Application Settings** window.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/gD1ixoZdDnSkL5I1RH3sj_288e363fd958c192abdc5523f4cfade7624d0972b812bf69ee0fae2b5afcce1a-image.png)

4. Click **Apply**.

## Build an OAuth 2.0 flow into your application

To build an OAuth 2.0 flow in your application, complete the following steps:

- Decide which [Grant Type](docId\:ZEdV7AKHOKwSBGN9hJIgr) is most appropriate for your application.
- [Register](docId\:QlcGFoh9mcZPQ88kdONI0) your application with Optimizely.
- Point customers to Optimizely's [authorization](docId\:QlcGFoh9mcZPQ88kdONI0) URL in your application.
- Process a [redirect](docId\:SwliEKtCxvRloxxPGR-Fp) after the user accepts (or rejects) your application's access.
- Obtain an access token using an [authorization code](docId\:DOkjKQhGhI0HkHVq83rTu) or [refresh token](docId:9p5kJxTSFZShQUNbeA4mb), or through the redirect itself, depending on the authorization flow you are using.
- [Authenticate](docId\:FXVYDaHaGyWPSvihx3hJ9) with the REST API using the provided access token.

The sections in this category walk through each of these steps in detail.

If at any point you have questions or need help building out an OAuth 2.0 flow, [submit a ticket to the developer support team](https://optimizely.com/support).

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/WS69uzU38LrfP0TEOCdM1_a808da8-oauth-flow.png)