You are here:
Manage API Tokens
Use API Tokens, based on OAuth 2.0 authentication protocol, as a means to access Own from Salesforce APIs. Treat API tokens as securely as any other type of password. Make sure to store this token in a safe and secure location.
API tokens automatically expire after 180 days, whether they are in use or not. Once an API token expires, it is deleted and the user will not have access to our APIs. To maintain API access, revoke and regenerate API tokens before they expire. A user can only have one API token at a time. After generating a new API token, insert the new access key into the script in the API, see the API documentation. API tokens are cross-regional, meaning one API token works for all regions. A user’s role and Business Units determine their access. To disable the API token option and limit user access, contact support.
Create an API Token
- From the lower left navigation bar, click Edit Profile.
- From the lower left navigation bar, click Edit Profile.
- From the lower left navigation bar, click Edit Profile.
-
At the bottom of the API Token section, click Generate.
The New API Token dialog box appears.
- The newly generated personal API Token appears (hidden) in the field. If you want to view the hidden API token string, click the view icon (optional).
- Click Copy to copy the token into your clipboard.
An email will be sent to the user, confirming the creation of a new API Token.
After generating a new API token, insert the new access key generated into the script in the API. See the API documentation.
Revoke an Existing API Token
Important: Do not confuse revoking an API token in the application with revoking an OAuth token in Salesforce, which is a different procedure serving a different purpose.
- Sign in to your account.
-
From the user drop-down menu on the upper right-hand corner, go to the Edit Profile page,
and click Revoke.
The Revoke API token confirmation dialog box appears.
- Read the warning message, and click Revoke, to confirm revoking the API token.
Revoking an API Token is not reversible, and the API token will be revoked across all of your regions.
You will receive an email message confirming that your API token has been revoked.

