Site configuration

  1. Define an url segment challenge for the bexio authentication in the site configuration for the property bexio.authUrlSegmentChallenge. For security reasons prefer something cryptic like wdoufkyrkLoqaarxxvmdxyyj.
  2. Set the properties bexio.clientId and bexio.clientSecret (see Admin - Bexio)
  3. Set the property bexio.scopes (see Bexio API scopes)
Example bexio properties in site configuration
  authUrlSegmentChallenge: muhh
  clientId: 11111111-1111-1111-11111111111111111
  clientSecret: aaaaaaaaaaaaaaaaaaaa-aaaaa-aaaaaaaaaa-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  scopes: ['openid', 'profile', 'contact_edit', 'offline_access', 'kb_invoice_edit', 'bank_payment_edit']


  1. Create an app at with the following properties:

    • Allowed redirect URL: []/bexio-auth-[url segment challenge]


    Replace [url segment challenge] with the value previously assigned to the site configuration property bexio.authUrlSegmentChallenge.

  2. Assign the “Client ID” and “Client Secret” to the corresponding properties bexio.clientId and bexio.clientSecret from the site configuration.