Bring Your Own App (BYOA)

By default, OAuth connections use the platform app: a single application registered by Zoan Automation with the provider, shared by all tenants. This gives a one-click experience with nothing to configure.

BYOA (Bring Your Own App) optionally lets you use your own OAuth application for a provider: your credentials (client_id / client_secret), your consent screen and your quotas.

It’s optional

You don’t need BYOA to get started. The platform app works for most cases. BYOA is for organizations with specific requirements.

When to use it

• Your branding: the consent screen shows your organization’s name, not “Zoan Automation”.
• Compliance / IT: policies that require only company-registered apps to access their Workspace.
• Quotas and limits: you don’t share the shared app’s quota or refresh token limit — each Google client_id has a refresh-token cap, and exceeding it invalidates the oldest one without warning.

What changes and what doesn’t

BYOA only replaces the client_id and client_secret. The provider URLs and the scope catalog still come from the platform. Everything else (creating connections, authorizing, refreshing tokens) works the same.

	Platform app	BYOA
Who registers the app	Zoan Automation	Your organization
Consent screen shows	”Zoan Automation”	Your brand
Quotas / refresh tokens	Shared	Yours
Effort	None	Register an app once

Set it up

1. With the provider (Google Cloud Console, Azure AD, etc.) register your own OAuth app.
2. In the environment, open Centro › Recursos › Integraciones › Administrar cuentas OAuth y permisos (Center › Resources › Integrations › Manage OAuth accounts and permissions) and click Apps OAuth propias (Own OAuth apps). Pick the provider and copy the Redirect URI shown. The dialog also lists the permissions Zoan Cloud will request.
3. Register that Redirect URI in your provider app (it’s a single URL, the same for everyone).
4. Add the provider-required scopes to your app.
5. Back in Apps OAuth propias, paste your Client ID and Client Secret and click Guardar (Save).

The own app belongs to the tenant: it applies to that provider’s connections in every environment. Setting it up requires the permission to manage connections.

Providers without a shared app

If a provider has no platform app, Nueva conexión says so and takes you to Apps OAuth propias: for that provider, your own app is required.

From then on, connections for that provider in your tenant use your app. Existing ones keep working; when you reconnect them they switch to your app.

The secret is stored encrypted

The client_secret is stored encrypted and never shown again. When editing, leave the secret field empty to keep the current one; fill it only to replace it.

Revert to the platform app

In Apps OAuth propias, pick the provider and click Eliminar (Delete). Connections for that provider revert to the shared platform app on their next authorization.

Next steps

• OAuth connections — create and authorize connections.