Skip to main content

Activate a Destination Account for OAuth Destinations

Some of our destinations (listed below) require that an authorization using OAuth be performed by a user with the appropriate permission level before any distributions can be made to that destination. Within Connect, OAuth authorizations are performed by utilizing an OAuth "connection" and validating it with your destination-specific information. A connection can be created by any user with the appropriate permission level at the destination.

This validation must be done when the destination account is activated by using an existing OAuth connection for that destination or by creating a new connection at the time of activation.

After activation, the connection being used can be changed by editing the destination account properties.

Caution

  • Turn off popup blockers! If you have any type of popup blocker enabled, disable it before attempting to perform the authorization.

  • Having distribution problems? Occasionally a previous OAuth authorization might become unauthorized (either due to actions on the destination platform end or due to someone inadvertently unauthorizing LiveRamp). Reauthenticate the connection to see if that solves the distribution issue (see "Managing OAuth Connections" for more information). See "Troubleshoot Distributions to Destination Accounts" if you continue to have distribution issues.

Destinations That Require Authorization Using OAuth

Currently, the following destinations require authorization using OAuth before any data can be distributed to the destination account:

Validate OAuth Connection During Destination Account Activation

While performing the steps in “Activate a New Destination Account” and before attempting to finalize the activation:

Note

The instructions below are valid for any OAuth destination platform. The screenshots show the process for LinkedIn as an example.

  1. Select one of your existing OAuth connections for that destination from the OAuth Connection drop-down list, or select + New OAuth Connection to create a new connection for that destination and follow the authorization process at the destination's website (LinkedIn example shown).

    C-Activate_New_Destination_Account-Select_OAuth_Connection.jpg

    Note

    If creating a new connection, follow the instructions to perform the authorization in the dialog that opens for that destination. See the appropriate section below for authorization information for specific platforms.

  2. Enter the appropriate information in the other OAuth-related fields (LinkedIn example shown - required fields vary by destination).

    C-Activate_New_Destination_Account-OAuth_fields.jpg

  3. Click VALIDATE OAUTH CONNECTION.

    C-Activate_New_Destination_Account-Validate_OAuth_Connection_button.jpg

    Note

    When activating a TikTok destination account, no VALIDATE OAUTH CONNECTION button appears (unlike other OAuth platform’s destination accounts). Skip to the next step.

    After the validation process is completed, a validated check mark appears:

    C-Managing_OAuth_Connections-validate_checkmark.jpg

    Note

    If a system error occurs, an error banner appears:

    C-Managing_OAuth_Connections-validate_system_error_banner.jpg

    Try to validate again. If you continue to get this error, contact your LiveRamp representative.

    Note

    If the seat or account ID is incorrect, an error message appears:

    C-Managing_OAuth_Connections-validate_error_message.jpg

    Check that the ID is correct and try to validate again.

  4. Complete any additional steps to activate the destination account.

Perform OAuth Authorization for LinkedIn

Caution

LiveRamp's OAuth integration with LinkedIn was updated on October 3, 2022. If you are the creator of one or more LinkedIn OAuth connections used by your LinkedIn destination accounts, you might need to take action as a result of this update. See this announcement for more information.

Account type required: The LinkedIn account needs to be a campaign manager account and must correspond to the account ID entered on the destination account.

OAuth expiration: OAuth credentials at LinkedIn expire 1 year after authorization. After 1 year (or if you notice your distributions are not going through), perform OAuth authorization at LinkedIn again.

Required destination account fields:

  • Accountid: The 9 digit LinkedIn account ID. This ID can be found in the URL when logging into Campaign Manager (after "/accounts/"). Contact your LinkedIn account representative if unsure of which value to use here.

Steps to perform OAuth for LinkedIn:

  • Once the LinkedIn login dialog appears, enter your credentials and then click Sign in.

    C-Authorize_DA_with_OAuth-LinkedIn-login-screen.jpg

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

Perform OAuth Authorization for Bing

Permission level required: Super Admin or Standard User

Prerequisites: Bing requires that your Microsoft ads accounts be configured to allow users to consent to apps before OAuth authorization can be completed. To enable this setting, a user with either a Global Administrator or Privileged Administrator role will need to follow these instructions and select the "Allow user consent for apps" option (the third selection in the image below). If you have any issues, contact your Bing representative.

C-Perform_OAuth_for_Bing-Allow_consent.png

Note

LiveRamp is not able to provide workarounds for these settings. Contact Microsoft to troubleshoot the Azure Admin requirements.

Required Account Type: Contact your LiveRamp account representative for Required Account Type information.

OAuth expiration: None

Required destination account fields: Customer ID

Steps:

  1. Once the Microsoft login dialog appears, enter your credentials and then click Next.

    Bing_OAuth-enter_credentials.png

  2. Complete the Multi-Factor Authentication process.

    Bing_OAuth-perform_MFA.png

  3. From the Authorize app dialog, review the access granted and click Yes.

    Bing_OAuth-give_access.png

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

Troubleshooting Bing OAuth Issues

If you're having issues with your Bing OAuth connection, try these troubleshooting steps:

  1. Confirm that you have “Super Admin” or “Standard User” permission levels on your account.

  2. Confirm that the Microsoft Ads account is configured to allow users to consent to apps. To enable this setting, a user with either “Global Administrator” or “Privileged Administrator” will need to follow these instructions and select the "Allow user consent for apps" option (the third selection). For further assistance, reach out to your Bing rep.

  3. Once confirmed, create a new OAuth connection and use that connection to validate the destination account.

    Note

    If multiple unused Bing OAuth connections exist, remove them, create a new connection, and use that connection to validate the destination.

If the above steps do not resolve the issue, create a support case.

Perform OAuth Authorization for Pinterest

Permission level required: Admin or Audience level

OAuth expiration: OAuth credentials at Pinterest expire 1 year after authorization. After 1 year (or if you notice your distributions are not going through), perform OAuth authorization at Pinterest again.

Required destination account fields:

  • Advertiser ID: Your Pinterest-provided advertiser account ID. Should be numeric.

Steps to perform OAuth for Pinterest:

  1. After the Pinterest login dialog appears, enter your credentials and then click Log in.

    C-Authorize_DA_with_OAuth-Pinterest_login-screen.png

  2. From the Authorize app dialog, click Give access.

    C-Authorize_DA_with_OAuth-Pinterest_app_popup.png

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

Perform OAuth Authorization for Snapchat

Snapchat account requirements: The account must be a Business Ad Account with Snapchat.

Permission level required: The Snapchat user must either be an Organizational Admin, or a user with Campaign Manager or Data Manager permissions.

Required destination account fields:

  • Client: The name of your company or account at Snapchat. Contact your Snapchat account representative if unsure of which value to use here. Do not include whitespace or other special characters (e.g., use "CompanyName" or "Account_Name").

  • Snapchat Ad Acct ID: The Ad Account ID issued to you by Snapchat. Contact your Snapchat representative for more information.

Steps to perform OAuth for Snapchat:

  1. After the Snapchat login dialog appears, enter your credentials and then click Log in.

    C-Authorize_DA_with_OAuth-Snapchat_login_screen.jpg

  2. From the dialog that appears, click Continue to grant access.

    C-Authorize_DA_with_OAuth-Snapchat_confirmation_screen.jpg

  3. From the dialog that appears, click Continue to return to the destination account screen, where you should see the blue success banner at the top of the screen.

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

If you receive an authorization error, confirm that the account is a Business Ad Account and that the user performing the authorization has the appropriate permission level.

More info on Snapchat User Roles and Permissions can be found here.

Perform OAuth Authorization for TikTok

Permission level required: The TikTok account needs to have either the "Ad Account Operator" or "Ad Account Admin" permission level.

Steps to perform OAuth for TikTok

  1. After the TikTok for Business login dialog appears, enter your credentials and then click Log in.

    C-Perform_OAuth_TikTok-login.png

  2. From the dialog that appears, click Confirm.

    C-Perform_OAuth_TikTok-confirm_button.png

    Note

    Do not uncheck any of the check boxes.

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

Perform OAuth Authorization for Twitter

OAuth expiration: None

Required destination account fields:

  • Account ID: Alphanumeric string of characters that indicate the ads account ID that the segments will be sent to.

  • Ttl In Days: Number of days that users added to a segment will be active in the segment. The default value is 180 days. This can be changed after the DA is created.

Caution

Data sellers that make distributions to Twitter on behalf of their end clients follow a different process. See "Data Sellers Distributing to Twitter" for more information.

Steps to perform OAuth for Twitter:

  • After the Twitter authorization dialog appears, enter your Twitter credentials and then click Sign In.

    C-Authorize_DA_with_OAuth-Twitter_login-screen.jpg

You’ll briefly see a redirect dialog.

C-Authorize_DA_with_OAuth-Twitter_redirect_screen.jpg

You’ll be directed back to the destination account screen and should see the blue success banner at the top of the screen.

In this section:

OAuth (Open Authorization) is an open standard for token-based authentication and authorization.