Registering an external application, meaning an application that is external to your UiPath platform, is a way to share your UiPath resources without having to also share your credentials. Instead, using the OAuth framework, you can delegate your UiPath authorization to external applications.

You can register third-party applications so that they can obtain authorization to access your UiPath resources. Once registered, these applications can make API calls to UiPath applications to access the resources you include in the registration scope.

Supported Application Types and Access Scope

You can register:

• confidential applications: Applications that can safely store the application secret generated after registration; for example, web applications and service-to-service (S2S) applications.
• non-confidential applications: Applications that cannot guarantee the safe storage of the application secret and therefore one is not created; for example, desktop or native mobile applications.

The allowed authorization grant type is different depending on the type of the application. Because of this, you can register confidential applications with different scopes: user, application, or both. But non-confidential applications can only send requests for user scope, meaning that a user must log in to authorize the request for the application.

Available UiPath Resources

When registering the external application, you give it access to one or several UiPath resources through the API of a UiPath application.

The following APIs are available:

• Orchestrator API
• Test Manager API.

Two Parts to Authorizing External Applications

There are two parts to set up so that an external application can access your UiPath resources over OAuth: