Zendesk OAuth client

The three boxes

Sign in with Zendesk starts only after you paste three values. Create the OAuth client on your Zendesk account, then paste them into Settings → Connectors → Zendesk → Org Zendesk OAuth app.

1. Subdomain

1. Open Zendesk in the browser.
2. Read the address. Example: https://arcus-30222.zendesk.com.
3. The subdomain is the first label: arcus-30222.
4. In Arcus, the Subdomain box gets arcus-30222. The placeholder yourcompany means “your first label,” not the words yourcompany.
5. arcus-30222 is the real subdomain for this account. Other companies type their own first label.

2. Unique Identifier and Client secret

1. In Zendesk: Admin Center → Apps and integrations → APIs → Zendesk API → OAuth Clients → Add OAuth client.
2. Client name can be Arcus. Agents see this name on the consent screen.
3. Unique identifier: you choose it. Example: arcus_connect. It must be at least 6 characters.
4. That exact string is the Arcus Unique Identifier. Do not use the single word arcus. Sign in will not start.
5. Client kind: Confidential.
6. Redirect URL, no trailing slash: https://arcus-api-production-a4fc.up.railway.app/api/v1/oauth/zendesk/callback
7. Save.
8. Zendesk shows the secret once. That value is the Arcus Client secret. If you close the page, you cannot see it again.
9. Lost the secret? In Zendesk, create a new secret on that OAuth client. Paste the new secret into Arcus. Do not type a secret you made up.

https://arcus-api-production-a4fc.up.railway.app/api/v1/oauth/zendesk/callback

3. Back in Arcus

1. Settings → Connectors → Zendesk → Org Zendesk OAuth app.
2. Paste Unique Identifier (arcus_connect, or the id you chose).
3. Paste Client secret (the one Zendesk showed once).
4. Paste Subdomain (arcus-30222 for this account).
5. Press Save org OAuth app.
6. Press Sign in with Zendesk.

The refresh line

“Could not refresh the org OAuth app list. Sign-in still follows the last known status — this is not a Zendesk session.”

1. Arcus tried to load a previously saved app from the API. That load failed.
2. The three fields are not marked wrong by this line.
3. Type or paste the three fields and press Save org OAuth app.
4. API token remains a separate path. Use Alternative credentials if you are not ready to save an OAuth client.