Author: Pathfix

As software developers, we all LOVE open source!

But is open source the right solution when it comes to OAuth 2 and OAuth 1 token management system? In this article, we dig into the pros and cons of using an open source token management system for OAuth2 and OAuth1 requirements.

What is OAuth token?

When dealing with OAuth connectivity, you need to have a complex token management system built that generates and manages OAuth tokens. The best analogy to understand OAuth tokens is to think of it like a hotel keycard. The keycard allows you access to your room, and your room only.

A token management system generates these OAuth token and manages the validity of these tokens.

Sounds simple?

Far from it..

The complexity of OAuth token management systems

In principle, the TMS creates tokens required by the service provider for validating and providing data access.

However, each provider follows a slightly different method and process for validating tokens. This means, once size does not fit all providers. Meaning, you will need to create a new framework to manage the methods required for each service provider.

The token management system needs to manage all the methods and be able to generate the right oauth tokens for each provider requirement. This translates into complex and large TMS files that need to be run on its own servers while not having any down time.

There are a few open source Token management systems developed by developers globally. Let’s take a deep dive into the pros and cons of using open source solution.

Pro’s of using open source token management system for OAuth2

• Readymade solution: You get a pre-build token management system that you can use with your application. However, you need to make sure you pick the right language and provider support.
• Reduction in hours: There is small amount of time saved by having a framework to work off. Of course, each open source framework would still need significant amounts of time to customize to your particular needs.
• No initial costs associated: Open source is free. This is the biggest Pro of choosing to with open source. This does not include server costs and engineering hours spent in customizing the code to your specific needs.

Cons of using open source token management system for oauth2

• Stability: As is the nature of open source, it is a one time build and as there isn’t any single ownership associated, there is no one responsible to maintain uptime connectivity
• Support: Once again, due to no ownership, support is not something you can expect with an open source code.
• Provider limitations: Not all providers will be supported out of the box. Which means, you will essentially need to get token management system + SDKs for each providers.
• Large code base: Due to the multiple TMS and SDKs required to be maintained, you essentially end up managing a large chunk of code
• Time spent: Large number of engineering hours will be spent in trying to modify the code to work for you and your needs. Time you could spend on building your platform.

Unfortunately, in the case of oauth tokens and token management system, the Cons list outweighs the Pros list.

So, although we love open source solutions, it does not work for business-critical framework like oauth2 token management systems.

Get a secured serverless oauth2 token management framework

Pathfix takes care of the entire token management process. From the time the user clicks on Integrate, the system will generate and manage the tokens that are required for each provider. This includes the OAuth tokens, Access tokens, Refresh tokens and any API stamping required by the provider.

You get:

• A proven and stable platform that handles millions of call requests
• Round the clock support by a team of experienced developers
• Quick connectivity without downloading files or SDKs
• Secure platform with encryptions and flows in place

 

Signup for a free Pathfix account here and see the OAuth Token Management System in action in your own app.

Before you start offering your end users the ability to integrate and push or pull data from other application into your app, you need to have an OAuth tokens system, or more commonly called the OAuth Token Management System.

OAuth Token management system is a framework that you would need to generate access tokens, get refresh tokens and stamp all API calls between your app and the 3rd party provider. Every provider you integrate with, will request for a different method and token requirement. This means you will need an extensive token management system that would handle different scenarios and requirements.

Before we proceed to best way to handle OAuth tokens for both access tokens and refresh tokens, a quick intro to what an OAuth token is.

What are OAuth Tokens?

OAuth tokens act like a pass for an application to gain access to a set of data. The best analogy to understand this is to think of a hotel keycard. The keycard that was generated for you gives you access only to your room, not all the rooms in the hotel. OAuth tokens work in pretty much the same way, they allow you to get access to a set of permitted data.

Here is a detailed post on what is OAuth and the different pieces required to complete the OAuth based integration: https://pathfix.com/blog/looking-to-offer-integrations-to-your-users-you-need-oauth/

Token Management System

An OAuth token management system needs to perform the following activities:

• Generate tokens
• Verify the tokens
• Refresh expired tokens
• Store tokens in a secure data storage
• Secure at-rest and in-transit

The token management system must be secure, with tokens being accessible only by the service provider.

The traditional approaches of getting an OAuth token management system would be either to build it yourself or use an open source solution.

Should you build an OAuth token management system?

30% of time spent on building OAuth connectivity goes into building a secure OAuth token management system. This roughly translates to approx. 600+ hours spent on building the token management system alone, for just 5 providers. And since most providers don’t follow the same token approach, you will need to build a new system for each provider.

This is time spent on only one piece of the OAuth connectivity puzzle.

What about open source OAuth token management system?

We love open source. As developers, we understand the value of open source. It allows us to simply pick and use software extensions to add to our existing application.

However, since the open source piece of code isn’t maintained by anyone, stability becomes a concern as there isn’t any ownership or review mechanism in place.

Pathfix Token Management System

An open and flexible system, Pathfix takes care of the entire token management process. From the time the user clicks on Integrate, the system will generate and manage the tokens that are required for each provider. This includes the OAuth tokens, Access tokens, Refresh tokens and any API stamping required by the provider.

This means, you can get your OAuth connections running in just a few minutes and use the hours you would’ve spent building the OAuth system into building your application instead.

Why Pathfix

Secure and stable. Pathfix encrypts all the tokens, get you connected to the providers API endpoints with ease and gets you connected instantly. With guaranteed uptimes and constant updates and features rolled out, makes Pathfix the perfect OAuth solution for your integration needs.

Here is a Playground that you can use to try different endpoints. You can signup for a free Pathfix account here and see the OAuth Token Management System in action in your own app.

Integrations. According to a recent study by Gartner, through 2020 SaaS companies will be spending 50% of development time on integrations. Platforms all over the world are implementing integration-first strategies to grow and scale their product usage.

However, before you can offer any SaaS integration to your users, there is a crucial piece of technology implementation you need to know – OAuth.

While there are several SaaS solutions that deal with integrations, these mostly handle internal workflow automations and not user facing, native integrations. This is where OAuth comes in.

To know more about the difference between a workflow automation tool and an oauth solution, read our post on Pathfix Vs. Zapier.

What is OAuth?

According to Wikipedia “OAuth is an open standard for access delegation, commonly used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords.”

In simple terms – OAuth allows you to receive authorization from your users to get access to their data. This data does not only mean user identity, but access to data they have with their providers.

OAuth framework is the most secure and preferred method adopted by most providers globally to allows for communication between applications. This is largely two-way communication, pushing data to platforms and/or pulling data into your platform.

OAuth Scopes

Scopes limits the SaaS application’s access to the user’s data. During authorization, the user is presented with a consent screen that shows the scopes it wants to access. The user can then allow or deny access to the scope presented. The SaaS app can request access to one or more scopes which will show up in this consent screen.

Scopes are always defined by the service provider; they define what data can be accessible by 3rd party and what cannot. While accessing, it is always a good idea to check the scopes permitted by the provider and enter that information that is requested as-is.

OAuth Grant Flow

The most common grant type is the Grant Flow. This flow exchanges an authorization code for an access token.

Here is how a typical Grant Flow works:

Token Management System

As shown in the flow above, tokens are required during the process of receiving consent and permission from the user to access data. These are:

Access tokens – Applications use access tokens to gain and make API requests on behalf of the user. This token grants the requesting application access to specific data granted by the user.

Refresh tokens – Used when an access token is expired, a refresh token is sent by the client to refresh expired access tokens.

Your token management system needs to verify tokens, refresh expired access tokens, store tokens in secure and confidential data storage that is accessed by the provider only and most importantly, be secure in-transit and at-rest.

OAuth Authorization Server

The OAuth Authorization Server (AOS) is a gatekeeper that providers authentication and issues tokens. Also, it validates or rejects tokens before calls are redirected to the internal API server

The final piece, SDK’s

SDK stands for Software Development Kit (or devkit) is essentially a collection of tools you need to build on a platform.

They are designed to perform specific tasks, programming, or languages. This means if you are looking to build an integration to Google Sheets to pull all new entries into your application, you will need to look for and/or build an SDK that performs that exact task complete with the programming language, API and endpoints.

Most often, during the OAuth programming stage, this step consumes the most time as this requires research and finding the right and stable devkit to complete the actions you are looking for.

Or, Get Serverless OAuth Instead

So yes, building an OAuth module with the right server, SDK, token management and flows is time consuming and a bit complicated. Most service providers have their own structures and flows that you need to build for. Which means, one size does not fit all. If you are looking to integrate with multiple providers, you will need to go through this entire process again.

With Pathfix, instead of all that manual work, you can get oauth connected and start using any providers APIs in just a matter of minutes. Pathfix is an oauth tool that gets you connected to any provider with just a few lines of code. It handles the entire framework, token management and servers, without needing SDKs ever, all ready to go.

Reference Links

We recommend going through some of these reference links if you are looking to build the entire OAuth structure yourself

https://oauth.net/2/

https://www.oauth.com/

If you are building or part of an existing SaaS platform, you probably have already setup a login module where your users can enter an ID and password.

Your login module already manages the following:

• Capture email and password
• Store in encrypted modules
• Account linking
• Subscription linking
• Feature access
• Role definition

… essentially, everything you need to manage your users.

But, you would like to add a convenient button that would allow your users to use their login from an existing provider, to access your platform.

This is where Single Sign On comes in.

---

What is Single Sign On?

Single Sign On (SSO) is an online identification methodology that lets websites use other, trusted services to verify users.

Simply put, you offer your users the ability for them to login to your platform, using other websites login credentials. All this without creating or sharing passwords.

SSO leverages OAuth based authentication. The identity provider offers the requesting platform the ability to use their identity scope to allow their verified users to login to platforms. User verification is done completely by the service provider.

Why SSO?

There are multiple benefits of adding SSO to your platform. Let’s look at both sides –

1. User Benefits
2. Business Benefit.

User Benefits

Convenience: Your user gets to login to your platform using their existing login credentials. There are hundreds of platforms with hundreds of login credentials to remember and save. By adding an SSO option, you make it convenient for your user to login to your platform without the need for any additional login credentials to remember.

Faster login: Users get quicker access to your platform with an SSO button with no long sign up forms to fill.

Permission transparency: The entire authentication is completely transparent. Users get to see the data the platform is requesting for and allow access that is being requested by the app.

Secure: With oauth, there are no credentials shared between applications

Business Benefits

Less code to manage: an SSO based login approach allows businesses to extend their login module without adding any additional code to manage and maintain.

More users: Faster onboarding equals more signups. Businesses that add SSO have seen a significant increase in their signups since there are no forms to fill up adding to the signup funnel. User click to login and access your platform instantly, resulting in more signups.

Verified signups: User profiles are verified by the identity provider, this takes away the entire email verification process.

Added trust: Adding the ability to login with a trusted and existing provider add a sense of trust with the user since they are not sharing any sensitive data with you and your app has been verified by the service provider.

Secure login: Since there are no passwords to maintain, there is reduced chances of being hacked or stolen passwords

---

Popular Identity Providers

Here are some of the most popular identity providers

---

How to add SSO to an existing login module?

Pathfix’s SSO extension allows you to enable SSO in your existing login module in just a few minutes.

There are over 7 different identity providers you can choose from including Azure Active Directory, GitHub and Google; and quickly add them to your existing login module.

Here’s how you can achieve this:

• Login to your Pathfix account here
• Click on Extensions and select SSO (Single Sign On)

• Select your Application from the drop-down
• Pick the identity providers you would like to offer

• Enter the Client ID and Client Secret received from the selected service provider . (Note: some providers also require a Tenant Id, you will see the option to enter it here if required)

• Once you have completed the above step for each service provider you wish to add (selected providers will be marked with a Green Check-mark)
• Click on Generate Code

• Edit the text for Button prefix
• Enter the Callback function where you would like Pathfix to send the login information
• Enter a Hello text (e.g. Welcome) (This is how the user will be welcomed on your page. The text is followed by the First Name, Last Name of the user)

• Enter the code received into your existing login module (in the <div> where you want the social login buttons to show)
• The social login buttons will immediately show on your login section

Conclusion

Adding an SSO login button to your existing login module is a great approach to build users and quicker on-boarding processes. The process of adding some of the most popular identity providers is quick using Pathfix’s SSO Extension.

Sign up for free account with Pathfix.

Need further clarifications? Reach out to our team.

A lot of times users think Pathfix is like Zapier. Users have reached out to us asking if Pathfix is an alternative to Zapier.

So, to put rest to the whole ‘Pathfix Vs. Zapier’ discussion, we thought it best to write out a blog that details why we are nothing like Zapier.

Short answer? No, Pathfix is not like Zapier.

SaaS growth

With so many SaaS solutions being released daily, it is no surprise that integration and workflow automation tools are becoming the need of the hour. The more connected your SaaS gets, the more data and growth your SaaS sees.

 

To put this in numbers:

There are thousands of SaaS platforms that already exist. Of these, there are over 7,000 in marketing alone!

With these many existing platforms (with thousands of users), it would make sense to have an integration first approach so that your data speaks to their data and vice versa. This is where Integrations come in.

---

Let’s break this down…

There are 2 types of integrations:

1. Backend integrations
2. User facing integrations

 

Backend integrations refers to server to server connections that perform actions and process data in the background. These could be pulling data from another platform, performing actions on them (e.g. analysis, etc.) and moving the processed data into another server/platform.

Backend integrations can be either internal data or user data. Internal data is data that belongs to the internal team and user data is data that belongs to the user.

Zapier is great for moving bits of data that belong to internal team members – not for when you want to move data that belongs to your user.

 

User facing integrations allow a SaaS platform’s user to connect their 3rd party tools to the platform. This requires an End-User Authorization process (OAuth, API Key based) that lets the user give permission to the requesting SaaS to access data from the provider.

 

Pathfix is built for user-facing SaaS integrations.

The Pathfix OAuth platform handles the entire OAuth process between the 3rd party app and your SaaS, allowing you to offer native, user facing integrations to multiple providers without managing the OAuth-based authorization flows.

Pathfix Automation handles Backend integrations (server to server) for your connected users through its workflow based interface to call any providers APIS as well as handles complex data transformation needs along with webhook functionalities – all while maintaining the user’s context.

 

Zapier is the workflow automation tool that allows individuals to connect to apps and action a flow based on a trigger. These workflows however, are only for apps that you have an account for – i.e. you log into Software A and Software B and create a workflow between the two apps. It is not built for user-facing SaaS integrations.

---

Here’s a quick comparison of Pathfix Vs. Zapier:

Conclusion:

If you are looking for a solution to build integrations in your SaaS platform – you need Pathfix (not Zapier).

Pathfix has been built to enable integrations in SaaS platforms. We help SaaS creators build user-facing integrations on their platform.

Start with the OAuth Platform or build out your API automation workflow with the Automation platform.

Need further clarifications? Reach out to our team.

CRM softwares allow businesses to manage customer interaction and customer data. Additionally, CRM tools help companies manage vendors, partners and employee relations.

Businesses choose CRM tools to help them manage their business information and it is one of the first tools purchased, its no surprise that CRM tops our list of integrations any SaaS platform should connect to.

Here are the top 3 integrations SaaS companies pick in the CRM category:

Hubspot

Hubspot has over 73,400 customers in more than 120 countries

Hubspot is a leading growth platform that offers an end to end solution across marketing, sales, customer service, and CRM function. It is our number 1 pick for CRM integrations chosen by our users.

Salesforce

Salesforce has over 150,000 customers (SMB and Enterprise) as of October 2019

Salesforce is an all in one platform for sales, marketing and service. Additionally, Salesforce offers a suite of enterprise solutions that focus on marketing automation, app development, customer service and much more.

Pipedrive

Pipedrive has 50,000 customers as of March 2017

Pipedrive is the #1 user rated CRM solution that focuses on Sales CRM and pipeline management solution

Serverless OAuth Integration With Pathfix

Pathfix allows you to connect to these productivity apps and more in less than 5 minutes without managing any servers or SDK’s. Check it out here.

Integrations help you build usability and scalability in your SaaS product. Building connections to other platforms allows you to be a part of your users stack.

However, identifying the platforms you want your SaaS to be connected to can be a long process.

Since Pathfix allows SaaS platform builders to connect to multiple providers, we wanted to share the top 5 productivity tools builders connect to.

What is a Productivity Software?

Productivity softwares help you work more efficiently by managing parts of your daily activities and handle daily tasks effectively.

Here are the top 5 productivity software’s you should integrate with in 2020:

Slack

Slack had around ten million daily active users and 85,000 paid organization users as of January 2019.

Slack brings team communication and collaboration into one place so you can get more work done. The first choice for team collaboration and communication, Slack is the top choice to build integrations.

G-Suite

G Suite had 4 million paying businesses, and 70 million G Suite for Education users as of January 2017.

G Suite is a suite of cloud computing, productivity and collaboration tools, software and products developed by Google Cloud. With 4 million+ businesses, G Suite is one of the most commonly used productivity tools which include Docs, Sheets, Forms and Slides.

Trello

Trello has 50 million registered users as of October 2019

Trello is a very popular visual list making application that focuses on team collaboration with its boards, lists, and cards. Trello boards are used anywhere from managing daily activities to product roadmap.

Google Calendar

Google calendar has over 500 million installs as of February 2017

Google Calendar is a time-management and scheduling calendar service developed by Google. Google calendar is the default calendar option for most users globally as it is available for free with every Gmail account (personal) and G Suite account (business). This makes it the top choice for any calendar related integration.

Intercom

As of February 2017, Intercom has 100,000 monthly active users. As of October 2018, Intercom has 30,000 paying customers.

Intercom is a message-based communication platform that allows businesses to communicate with customers/users within their website, application, social media or email.

Integrate with Pathfix

Pathfix allows you to connect to these productivity apps and more in less than 5 minutes without managing any servers or SDK’s. Check it out here.

Cloud solutions are growing rapidly. To put things in perspective, as of today, there more than 7K cloud saas solutions in the marketing space alone!

The reason is simple – it is not possible for one SaaS solution/platform to cover all the needs for any organization.

What does that mean for the user?

The user will end up having a set of solutions that when combined, allows them to get the functionality they need. But this means, they have multiple logins, data split across these solutions and have to spend time to bring all this data in one place.

What does this mean for the SaaS?

The chances of a SaaS solution being used more frequently, goes down. Your user will mostly stick to the solution that offers the most answers to their questions. The SaaS solution needs to be a part of the users existing stack to get more usability out of their system.

The solution: Integrations

Integrations allow you to connect and speak to the apps that your users are already consuming, this increases the frequency of usage and allows the user to sync their data across the applications they use.

Why should you consider integrations?

Scalability

Adding integrations to SaaS allows you to add more value to your product. By giving your users the ability to connect to other softwares, they get new ways of using your product. This helps you scale your product quickly, rather than working as a loner.

Usability

By being a part of your users existing software stack, you increase the odds of your software being used. Offering integrations to other platforms also means that your users get to do much more with the data collected from your software.

User Ease of Use

Not having to switch between apps, logins (think about those retention emails), you have simplified how your users end up using the data collected by your app. You have not just built dependency on your app but you have also eased the users ability to use your platform.

Building integrations are a key factor for any SaaS platform that is looking to grow their solution. With multiple API builders out there, that get you going in a few days, connecting them can be one in less than 5 minutes by using Pathfix.