---
title: "Oauth Configuration"
slug: "connector-spo-pp-admin-guides-oauth"
updated: 2026-09-25T16:28:44Z
published: 2026-09-25T16:28:44Z
canonical: "docs.discngine.com/connector-spo-pp-admin-guides-oauth"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.discngine.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Oauth Configuration

From Spotfire version 14.5, mashup applications require OAuth authentication in cross-site configuration. This has impact on the SWAPP and on any other mashup application consuming the Discngine Connector JavaScript API if the Spotfire domain is different from the one of the mashup application host (Pipeline Pilot in case of the SWAPP). The following guide describes how to configure the OAuth authentication for the SWAPP.

## Prerequisites

Both Spotfire and Pipeline Pilot administrators need to know the servers URLs to connect together:

- Spotfire server URL, referred as `https://yourspotfireserver.com`
- Pipeline Pilot server URL, referred as `https://yourpipelinepilotserver.com`

## Spotfire

The Spotfire administrator needs to register a new JavaScript API Client following the **Mashup authentication** section of [Register API clients](/public/docs/connector-spo-pp-admin-guides-installation#register-api-clients) installation documentation. For the SWAPP, the placeholder used in the command line has to be replaced by the Pipeline Pilot server URL (`https://<public application host>` = `https://yourpipelinepilotserver.com`). Then the created identifier has to be communicated to the Pipeline Pilot administrator.

## Pipeline Pilot

The Pipeline Pilot administrator needs to set some specific package global properties.

- Open the Pipeline Pilot server administration portal
- Go to **Setup > Global Properties** in the left pane
- Select the **Discngine/Discngine Spotfire Connector** package
- Set and/or update the following global properties:
  - **WebPlayerAPI**: `https://yourspotfireserver.com/spotfire/js-api/oauth.js`  (previously it may be set to `https://yourspotfireserver.com/spotfire/js-api/loader.js`)
  - **WebPlayerAPIClientID**: set to the identifier provided by the Spotfire administrator
  - **WebPlayerAPIRedirectURL**: `https://yourpipelinepilotserver.com/discngine/swapp/oauth_endpoint.html`