Authentication - Noxus Documentation

Noxus supports multiple authentication methods to securely connect to external services.

Common Authentication Methods

OAuth 2.0
API Key
Client ID / Access Token
Service Principal

User-delegated access with secure token exchange

How It Works

Characteristics

Aspect	Details
Security	No password sharing, industry standard
Permissions	Granular control, user-approved
Token Management	Automatic refresh
Revocation	User can revoke anytime
Best For	User-specific actions, personal automation

Supported Services

Google

Workspace services

Microsoft

365 services

Slack

Workspace integration

GitHub

Repository access

Notion

Workspace databases

Profile and posts

OAuth is the most secure method and is recommended for all services that support it.

Simple token-based authentication

How It Works

Characteristics

Aspect	Details
Setup	Simple, no redirect flow
Rotation	Manual rotation required
Permissions	Service-level permissions
Management	Per-application keys
Best For	Developer tools, simple integrations

Supported Services

Airtable

Personal API keys

Linear

Personal API keys

OpenAI

Custom API keys (optional)

Anthropic

Custom API keys (optional)

API keys should be rotated regularly and stored securely. Never commit them to code.

Pre-shared credentials from a provider’s developer portal

How It Works

Characteristics

Aspect	Details
Setup	Manual app/integration creation in the provider’s admin
User Interaction	None after setup — credentials are tenant-scoped
Permissions	Defined when the app is created in the provider
Token Lifetime	Usually long-lived; rotation is manual
Best For	Enterprise systems, providers without OAuth, custom apps

Supported Services

Salesforce

Instance URL + Access Token

SAP

Base URL + Client ID + Client Secret

Shopify

Shop Domain + Admin API Token

Phone Number ID + Access Token

Slack (Custom App)

Bot Token + Signing Secret

Static access tokens don’t auto-refresh. Rotate them on a regular cadence and revoke promptly when team members leave.

Application-level access for Microsoft services

How It Works

Characteristics

Aspect	Details
Access Level	Organization-wide
Setup	Admin configuration required
User Interaction	None after setup
Permissions	Application permissions
Best For	Background automation, cross-user ops

When to Use

Ideal Scenarios

Background automation
Cross-user operations
Scheduled tasks
System integrations

Requirements

Azure administrator access
Admin consent for permissions
Client secret management
Organization-wide scope

Service Principal is ideal for automated, organization-wide operations without user context.

Setup Examples

Google Workspace

OAuth setup for Gmail, Drive, Sheets, Docs, and Calendar

Slack

OAuth setup for workspace channels and messaging

Airtable

API key setup for bases, tables, and records

Microsoft 365

Service Principal setup for Outlook, Teams, and SharePoint

Security & Compliance

Encryption

All credentials encrypted at rest with database-level encryption

Token Management

Automatic OAuth token refresh and secure storage

Isolation

Tokens isolated per workspace with tenant segregation

Compliance

SOC 2 Type II, GDPR-compliant data handling

Best Practices

Development
Security
Performance

Test with sandbox accounts during development
Use separate credentials for dev/staging/prod
Handle errors gracefully with continue-on-error
Monitor rate limits to avoid throttling

​Common Authentication Methods

​How It Works

​Characteristics

​Supported Services

Google

Microsoft

Slack

GitHub

Notion

LinkedIn

​How It Works

​Characteristics

​Supported Services

Airtable

Linear

OpenAI

Anthropic

​How It Works

​Characteristics

​Supported Services

Salesforce

SAP

Shopify

WhatsApp

Slack (Custom App)

​How It Works

​Characteristics

​When to Use

Ideal Scenarios

Requirements

​Setup Examples

Google Workspace

Slack

Airtable

Microsoft 365

​Security & Compliance

Encryption

Token Management

Isolation

Compliance

​Best Practices

Common Authentication Methods

How It Works

Characteristics

Supported Services

How It Works

Characteristics

Supported Services

How It Works

Characteristics

Supported Services

How It Works

Characteristics

When to Use

Setup Examples

Security & Compliance

Best Practices