Envoy OAuth2 Password Grant connector profile – StackOne setup guide

Set up the OAuth2 Password Grant connector profile for Envoy in StackOne. One-time admin setup required before your users can link Envoy accounts via Hub.

Creating an integration in the Envoy Dev Dashboard requires an Envoy account with developer access. The Client ID, Client Secret, and Client API Key are shown only after you save the integration — copy them before leaving the page.

Create API credentials

The Envoy OAuth2 Client ID and Client Secret are generated by creating an integration in the Envoy Dev Dashboard. Sign in and create the integration, then copy the credentials into the StackOne Connector profile.

1. Sign in to the Envoy dashboard

   Open the Envoy dashboard sign-in page, enter your Company email address, click Next, and complete your password or SSO prompt to reach the Log in to the Envoy dashboard flow.

   
2. Open the Dev Dashboard

   In the left sidebar, expand Integrations and click Dev dashboard to open the My Integrations page, then click Create New in the top-right corner.

   • Direct link: Envoy Dev Dashboard

   
3. Enter the integration details

   On the Create Integration screen, under Details, type a recognisable name in the Name field (for example, StackOne). The other fields — Category, Description, Logo URL — are optional and can be left at their defaults.

   
4. Add the API scopes

   Enables actions: Cancel Reservation, Check In Invite, Check In Reservation, Check In Work Schedule, Check Out Reservation, Check Out Work Schedule, Create Blocklist Entry, Create Desk, Create Invite, Create Recurring Invite, Create Reservation, Create Work Schedule, Delete Blocklist Entry, Delete Desk, Delete Invite, Delete Work Schedule, Get Blocklist Entry, Get Company, Get Desk, Get Employee, Get Entry, Get Flow, Get Invite, Get Location, Get Recurring Invite, Get Reservation, Get Space, Get Unified Credentials, Get Unified Group, Get Unified Organization, Get Unified User, Get Work Schedule, List Blocklist Entries, List Desks, List Employees, List Entries, List Flows, List Invites, List Locations, List Reservations, List Spaces, List Unified Groups, List Unified Organizations, List Unified Users, List Work Schedules, Update Blocklist Entry, Update Desk, Update Invite, Update Recurring Invite

   Open the API Scopes dropdown and select every scope the integration needs. These scopes control what data the credentials can access — add all of the scopes below so every StackOne action works.

   

   • companies.read⧉
   • flows.read⧉
   • entries.read⧉
   • entries.write⧉
   • invites.read⧉
   • invites.write⧉
   • blacklist-filters.read⧉
   • blacklist-filters.write⧉
   • locations.read⧉
   • employees.read⧉
   • work-schedules.read⧉
   • work-schedules.write⧉
   • spaces.read⧉
   • spaces.write⧉
   • reservations.read⧉
   • reservations.write⧉
5. Save the integration

   Tick Yes, display on the integrations page, then click Save. Envoy generates the credentials only after the first save.

   • You do not need to enable Externally using OAuth2 — the StackOne password grant authenticates with the Client ID and Client Secret directly.

   

Copy your credentials

After saving, the Envoy API Credentials section appears. Copy the values into the matching fields of the StackOne Connector profile.

1. Copy the Client ID and Client Secret

   In the Envoy API Credentials section, copy the Client ID value into the Client ID field of the StackOne Connector profile, and copy the Client Secret value into the Client Secret field.

   • Client ID — the public identifier of your integration, shown under Client ID.
   • Client Secret — the private key paired with the Client ID, shown under Client Secret. Treat it like a password and store it securely.
   • If you navigate away, you can view these values again later by opening the integration from the Dev dashboard and clicking Configure.

   

Creating the StackOne Connector Profile

To create the Connector Profile in StackOne for Envoy:

1. Navigate to Connector Profiles

   Login to StackOne and navigate to Connector Profiles

2. Create New Connector Profile

   • Click + Connector Profile
   • Search for and select Envoy
   • Select Type as OAuth2 Password Grant

   • Fill out the fields using details retrieved from your provider:

     • Client ID
     • Client Secret
   • (Optional) Select Actions to be enabled for this Connector Profile
   • Click Create profile

Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for Envoy.