Security

Security, access control, compliance, and trust guidance for finance and platform teams.

Topic spotlight

OAuth Scopes and Permissions for Embedded Accounting Platforms

How to design least-privilege access for invoices, expenses, reports, journals, and connected apps in multi-tenant accounting systems.

Archive stream

The wider reading list across this topic, ordered from newest to oldest.

Teams often group API credentials, API keys, client secrets, and OAuth 2.0 into one broad idea: authentication.