Bring Your Own App (BYOA)

By default, OAuth connections use the platform app: a single application registered by Zoan Automation with the provider, shared by all tenants. This gives a one-click experience with nothing to configure.

BYOA (Bring Your Own App) optionally lets you use your own OAuth application for a provider: your credentials (client_id / client_secret), your consent screen and your quotas.

It’s optional

You don’t need BYOA to get started. The platform app works for most cases. BYOA is for organizations with specific requirements.

When to use it

• Your branding: the consent screen shows your organization’s name, not “Zoan Automation”.
• Compliance / IT: policies that require only company-registered apps to access their Workspace.
• Quotas and limits: you don’t share the shared app’s quota or refresh token limit — each Google client_id has a refresh-token cap, and exceeding it invalidates the oldest one without warning.

What changes and what doesn’t

BYOA only replaces the client_id and client_secret. The provider URLs and the scope catalog still come from the platform. Everything else (creating connections, authorizing, refreshing tokens) works the same.

	Platform app	BYOA
Who registers the app	Zoan Automation	Your organization
Consent screen shows	”Zoan Automation”	Your brand
Quotas / refresh tokens	Shared	Yours
Effort	None	Register an app once

Set it up

1. With the provider (Google Cloud Console, Azure AD, etc.) register your own OAuth app.
2. In the Connections menu, open OAuth Apps and pick the provider. Copy the Redirect URI shown.
3. Register that Redirect URI in your provider app (it’s a single URL, the same for everyone).
4. Add the provider-required scopes to your app.
5. Back in OAuth Apps, paste your Client ID and Client Secret and save.

From then on, connections for that provider in your tenant use your app. Existing ones keep working; when you reconnect them they switch to your app.

The secret is stored encrypted

The client_secret is stored encrypted and never shown again. When editing, leave the secret field empty to keep the current one; fill it only to replace it.

Revert to the platform app

In OAuth Apps, pick the provider and click Delete. Connections for that provider revert to the shared platform app on their next authorization.

Next steps

• OAuth connections — create and authorize connections.