---
title: Enabling OAuth authentication
description: To enable OAuth authentication, you need to create an implementation of the OAuthTokenHandler using the API provided in the Server SDK. For details on creating an OAuthTokenHandler extension, see the Server SDK documentation.
component: pingdirectory
version: 10.1
page_id: pingdirectory:pingdirectory_server_administration_guide:pd_ds_enable_oauth_authentication
canonical_url: https://docs.pingidentity.com/pingdirectory/10.1/pingdirectory_server_administration_guide/pd_ds_enable_oauth_authentication.html
revdate: July 5, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
  example-2: Example:
---

# Enabling OAuth authentication

## About this task

To enable OAuth authentication, you need to create an implementation of the `OAuthTokenHandler` using the API provided in the Server SDK. For details on creating an `OAuthTokenHandler` extension, see the Server SDK documentation.

## Steps

1. Install your OAuth token handler on the server using `dsconfig`.

   ### Example:

   ```shell
   $ bin/dsconfig create-oauth-token-handler \
     --handler-name ExampleOAuthTokenHandler \
     --type third-party \
     --set extension-class:com.unboundid.directory.sdk.examples.ExampleOAuthTokenHandler
   ```

2. Configure the SCIM servlet extension to use it as follows:

   ### Example:

   ```shell
   $ bin/dsconfig set-http-servlet-extension-prop \
     --extension-name SCIM \
     --set oauth-token-handler:ExampleOAuthTokenHandler
   ```