OAuth Connections
Some nunq integrations require OAuth authentication to securely connect to external services. This page covers how OAuth connections work within the platform.
Overview
OAuth is an industry-standard authorization protocol that allows nunq to access external services on your behalf without storing your password. When you connect an integration that uses OAuth, you are redirected to the external service's login page, where you grant nunq the necessary permissions.
Starting an OAuth Flow
To establish an OAuth connection:
- Navigate to the integration or tool settings that requires OAuth.
- Click the Connect or Authorize button.
- You will be redirected to the external service's sign-in page (for example, Microsoft's login page for SharePoint or Business Central).
- Sign in and grant the requested permissions.
- You are redirected back to nunq, and the connection is established.
Token Management
After a successful OAuth flow, nunq stores the access and refresh tokens needed to communicate with the external service.
- Tokens are encrypted: All OAuth tokens are stored using encryption at rest in the database.
- Automatic refresh: When an access token expires, nunq uses the refresh token to obtain a new one automatically. In most cases, you will not need to re-authenticate.
- Secure storage: Tokens are never exposed in the user interface or in API responses.
Reconnecting When Tokens Expire
In some cases, refresh tokens may expire or be revoked by the external service. When this happens:
- You will see a notification that the connection needs to be re-established.
- Navigate to the integration settings.
- Click Reconnect to start a new OAuth flow.
- Sign in again and grant permissions.
This typically happens when an external service's security policies enforce periodic re-authorization, or when permissions are changed on the external service side.
Supported OAuth Providers
The OAuth providers available in your nunq deployment depend on which MCP servers and integrations have been configured. Common providers include:
- Microsoft Entra ID (Azure AD): Used for SharePoint, OneDrive, and Business Central integrations.
- Other providers: Any MCP server that implements OAuth-based authentication can be connected through nunq.
Your administrator configures which integrations and OAuth providers are available. See Model Context Protocol (MCP) for information on adding new MCP connections.
