OAuth clients- a new way to leverage API access on Atlan
🎉 What's new
Introducing OAuth Clients in Atlan! You now have a more secure, scalable way to generate API tokens using client credentials—designed for modern authentication flows. With short-lived tokens and tighter control, this enhancement brings enterprise-grade security and flexibility to your integrations.
✨ Let's dig deeper
Head over to the Admin Center → API Access → OAuth Clients tab to get started.
Here's how the new OAuth flow works:
- Create a new OAuth application
You’ll receive a Client ID and a Client Secret after setup. - Secure your secret
The Client Secret is shown only once at the time of creation. Make sure to store it securely—it's not retrievable later. - Generate short-lived access tokens
Use the Client ID and Secret to request an API token. These tokens are time-bound, ensuring better security. - Regenerate anytime
If the token expires, you can use the same client credentials to fetch a new one. No need to manually reset or rotate tokens unless needed.
This approach gives you:
- 🔒 Improved security via short-lived tokens
- 🔄 Repeatable generation without friction
- 🛠️ Better control over API access points in Atlan
Tip: Use this flow when integrating Atlan with internal apps, pipelines, or external orchestration tools.
👏 Give it a shot
Create your first OAuth Client in the Admin Center and experience more secure and manageable API authentication. As always, we’d love your feedback on how this fits into your workflows!