UiPath Documentation
integration-service
latest
false
UiPath logo, featuring letters U and I in white

Integration Service user guide

Last updated Apr 20, 2026

Connections

About connections

Connections help in establishing tasks between single users and external applications. The connections are created once users authenticate with an API Provider.

Prerequisites

Before you can use connections, make sure the following conditions are met:

  • Integration Service is enabled and provisioned for your tenant.
  • Users who work with connections have the necessary permissions in Orchestrator. To create a connection, a user must have the Connections - Create permission in the target folder. For more information on permissions, see Configuring access for accounts in the Orchestrator user guide.

Connections in Orchestrator

Important:

Starting with March 2026, you can create new Integration Service connections in Orchestrator. Existing Integration Service connections will continue to be visible on the Integration Service Connections tab until July 2026 (this date is subject to possible extensions). After this date, existing Integration Service connections will be migrated to Orchestrator, and the Connections tab in Integration Service will be removed. This change is scheduled to become available to Community users first, then to Enterprise users progressively, depending on organization and tenant regions. Follow the Integration Service release notes to learn when the change is first announced.

Key benefits of managing connections in Orchestrator

This move brings several key advantages:

  • Less context-switching

    You can now create assets, queues, triggers, and connections all in one place, without navigating to another left-hand menu. Fewer clicks, fewer page loads, and lower cognitive load lead to a smoother workflow.

  • Easier troubleshooting

    When runs fail, you are already in Orchestrator reviewing jobs, queues, or logs. You can now view and manage the related connection in the same interface, reducing time to resolution.

  • A consistent mental model

    Orchestrator already centralizes your resources. Managing connections alongside assets and triggers ensures a more intuitive and cohesive experience.

Shared connections

When a connection is created in a shared folder, all users with access to that folder can use the connection in their automation workflows. The connection can be edited by all users with access to it.

We recommend creating connections for which authentication is done through personal accounts in Personal Workspaces, and only using shared folders for connections where authentication is done through service accounts. Administrators can prevent regular users from creating shared Integration Service connections in team folders. For more information, refer to Enforcing user-level Integration Service connection governance in the Orchestrator user guide.

Note:

All the Integration Service connectors support connection sharing and configuration at run time. For more information on configuring connections at run time, refer to the Orchestrator User Guide.

Creating a connection

The Connections tab in Orchestrator provides a central location for creating and managing connections. You can also create connections directly from automations in UiPath Studio, UiPath Studio Web, or UiPath Assistant.

To create a connection in Orchestrator, follow these steps:

  1. Select Orchestrator from the product launcher.
  2. Select a folder, and then navigate to the Connections tab.
  3. Select Add connection.
  4. To open the connection creation page, select the connector from the list. You can use the search bar to find the connector.
  5. Select the authentication type (if applicable), enter the required credentials, and then select Connect.

For more details, refer to Managing connections in the Orchestrator user guide.

Note:

To successfully create a connection, you must configure an IP addresses allow list for Integration Service. For more information, refer to Configuring the firewall in the Automation Cloud Admin Guide.

Selecting the authentication type

Some Integration Service connectors support multiple authentication types. You select the type when creating the connection. Available options can include:

  • OAuth 2.0 Authorization code
  • OAuth 2.0 Password
  • Bring your own OAuth 2.0 app
  • Personal Access Token (PAT)
Note:

Available options vary depending on the connector.

Managing connections

You can manage all connections in one place from the Connections tab in Orchestrator. This is where you can check the health of connections, reconnect, manage triggers, edit connection details such as the name and polling interval, and delete connections.

For more details, refer to Managing connections in the Orchestrator user guide.

Managing connections from UiPath Assistant

You can manage Integration Service connections directly from UiPath Assistant. To learn more, refer to Connections in UiPath Assistant.

Select Configure in browser to open the Connections page in Studio Web. To learn more, refer to Managing Connections in the Studio Web user guide.

Note:

Automation Cloud Public Sector users can view connections in UiPath Assistant, but not manage them. Instead, they can configure and manage Integration Service connections using the Package Requirements tab in Orchestrator.

Bring your own OAuth 2.0 app

UiPath Integration Service offers a Bring your own Oauth2.0 app (BYOA) model that allows enterprises to connect using their own OAuth 2.0 applications instead of the default UiPath-registered public OAuth app.

UiPath registers and maintains OAuth 2.0 apps on vendor developer portals for the majority of connectors (for example, Microsoft, Google, Salesforce, Atlassian Jira, etc.). In most cases, these apps come with predefined scopes and are managed entirely by UiPath.

However, some organizations may have strict IT, security, or compliance policies that prevent them from using external app registrations. In such cases, BYOA enables customers to use their own Client ID and Client Secret to authenticate and authorize Integration Service connections.

Common scenarios for when to use BYOA

Use BYOA when:

  • The application supports the OAuth2.0 Authorization code grant authentication type. Other OAuth2.0 types cannot be used under BYOA.
  • Your enterprise requires that all third-party integrations use internally managed OAuth apps.
  • You need to add or modify scopes that are not part of UiPath's default registered app.
  • Your organization's security or compliance policies prohibit shared app usage.
  • You want to control the OAuth app lifecycle, including rotation of secrets.
Note:

UiPath's public OAuth apps use fixed scopes and cannot be modified per customer request. If you require additional scopes, BYOA is the correct option.

How BYOA works

When creating a connection in Integration Service, you can select Bring your own Oauth2 app as the authentication type.

This allows you to enter:

  • Client ID and Client Secret - Credentials obtained from your app registration in the vendor's developer portal.
  • Scopes - Permissions required by the connector.
  • Redirect URI - Non-editable callback URL (https://cloud.uipath.com/provisioning_/callback for Automation Cloud). This is the callback URL that Integration Service uses to complete the OAuth flow.

Integration Service uses your credentials to perform the OAuth flow and securely stores the resulting access and refresh tokens.

Configuring a BYOA connection

Step 1: Register an OAuth App on the vendor portal

Create an OAuth 2.0 app in the vendor's developer portal (for example, Salesforce, Microsoft, Jira or Google). During registration:

  • Set the redirect/callback URI to https://cloud.uipath.com/provisioning_/callback.
  • Add the required scopes (see connector-specific documentation for mandatory scopes).
  • Ensure the vendor supports the grant type required by the connector (Authorization Code Grant).
Step 2: Create a connection in Integration Service
  1. Navigate to Integration Service > Connectors, select the desired connector, and then click Connect.

  2. Select the authentication type Bring Your Own OAuth2 2.0 app.

  3. Enter the following details from your registered app:

    • Client ID
    • Client Secret
    • Scopes (select from existing or type them manually)
    Note:

    Many vendors (Atlassian Jira, Coupa, etc.) expect the same scopes are present in your app as well.

  4. Follow the on-screen prompts to complete the OAuth consent flow by providing your username and password on the vendor's login page.

  5. Once authorized, the connection is securely stored and available to be used.

  6. Integration service takes care of periodically refreshing the access token.

Step 3: Verify mandatory scopes

Each connector has mandatory scopes required for its activities and triggers.

If your BYOA app does not include these scopes, connection creation will fail, or certain actions may not work as expected.

Refer to the connector's documentation to confirm the list of mandatory scopes.

Best practices

  • Use a dedicated enterprise app registration for UiPath Integration Service; avoid reusing app IDs from unrelated integrations.
  • Include only the necessary scopes for least-privilege access.
  • Keep client secrets rotated periodically and update them in Integration Service by editing connections.
  • Document app ownership and ensure continuity if admins change.
  • Verify redirect URIs exactly match the value displayed in Integration Service; mismatched URIs cause OAuth errors.

Security and maintenance

  • BYOA credentials are encrypted and stored securely in UiPath Integration Service and never exposed in plain text.
  • UiPath does not manage or monitor your custom app credentials or scopes.
  • Secret rotation, app de-registration, or scope maintenance are the customer's responsibility.

Common issues

The following table lists common issues encountered when using BYOA connections, along with their possible causes and resolutions.

IssuePossible CauseResolution
Invalid client or secretWrong client ID or secret.Verify credentials from the vendor app registration.
Redirect URI mismatchThe redirect URI in the vendor app does not match UiPath's value.Update the redirect URI in the vendor app registration.
Insufficient scopes or Access deniedMissing mandatory scopes in vendor app.Add required scopes and reauthorize.
Token expiring frequentlyVendor app configured with short-lived tokens.Enable refresh tokens in the app or extend token validity.

Connections in Solutions

You can manage connections and event triggers as part of your solution package. Refer to Solutions Management overview to learn what solution packages are, how they work, and how to create, manage, and deploy them.

When you create a solution package, connections and their associated event triggers are available in the Components panel. You can edit the following properties: Connection name, Connection description, and Authentication type. For event triggers, you can perform the same configuration steps as in Orchestrator.

docs image

Note:

You can also edit these fields at the time of deployment unless they are locked for editing.

Once the solution is built and published, the connections are available in the solution's Components panel. All the connections selected when creating the solution package can now be deployed.

Solutions Management does not display connections for processes unless an event trigger is connected as well. The issue may impact the solution deployment, requiring manual connection configuration for proper operation.

You can choose to deploy the solution package to a specific folder which doesn't yet exist in Integration Service. In this case, the folder is created automatically.

docs image

docs image

Connection Authentication type

As an admin, you decide during deployment whether to use an existing connection, create a new one, or allow the end user to select the connection.

Note:

Solutions moves the connections and their associated entity relations (such as workflows and processes the connection belongs to), but does not transfer authentication credentials.

During deployment, the administrator can set the Authentication type as:

  • Configurable by users: No connections are created or used from existing ones. Users are expected to configure the connection after the solution is deployed at runtime. Refer to Configuring connections in the Orchestrator documentation.

  • Authenticate after deployment is done: A new connection is created and it requires authentication after the deployment. The connection remains inactive until the authentication step is completed.

    • Before the authentication is completed, the username is displayed as System. Once authentication is successful, the username is updated to display the authenticator's credentials.

You also have the option of linking components. When you select Link to existing, a pop-up window displays all the connections accessible to the user deploying the solution package. You can choose any existing connection to be part of the solution package.

Note:

If you select existing connections for the connectors included in the solution package, and you also select a new folder during deployment, the folder is created in Integration Service, with no connections in it. Use this folder if preferences are modified or new connections are added.

The Link to existing option is not available when you edit a configuration using the following methods: Deployment configuration or Edit deployment configuration. To link components or edit the Authentication type after deployment, you must upgrade the solution package. This requires editing the solution and deploying the new version again.

docs image

Connections created in any folder through Solutions are not deleted, even when upgrading the workflow to use different connections. This guarantees that processes and automations relying on these connections are not impacted by the upgrade.

Troubleshooting connection issues

For information on how to fix common issues you might encounter when using connection, see Connections troubleshooting.

Was this page helpful?

Connect

Need help? Support

Want to learn? UiPath Academy

Have questions? UiPath Forum

Stay updated