---
title: "Walkthrough: Using an authorization item"
slug: "walkthrough--using-an-authorization-item"
abstract: "Describes how to create, configure, and use an authorization item."
---
# Walkthrough: Using an authorization item

If the destination endpoint of a webhook requires authentication, you must first create and configure an authorization item, then assign it to the webhook. You can create an authorization item in the Content Editor.

[SitecoreAI](https://doc.sitecore.com/sai/en/users/sitecoreai/en/sitecoreai.html) supports several authentication types. For details about authentication types and field definitions, see [Webhook authentication types](https://doc.sitecore.com/sai/en/developers/sitecoreai/content-modeling-and-presentation/workflow/webhooks/walkthrough--using-an-authorization-item/webhook-authentication-types.html "Webhook authentication types").


This walkthrough describes how to:

- Create an authorization item.
- Configure an authorization item.
- Add an authorization item to a webhook.

## Create an authorization item

To create an authorization item:

1. In the content tree, navigate to the */sitecore/System/Settings/Webhooks/Authorizations* folder.
2. In the content area, on the **Folder** tab, in the **Options** section, click the type of authorization item you want to create.
3. In the **Message** dialog, enter a name for the authorization item, then click **OK**.

## Configure an authorization item

You can configure an authorization item by entering the required authentication data into the [fields of the authorization item](https://doc.sitecore.com/sai/en/developers/sitecoreai/content-modeling-and-presentation/workflow/webhooks/walkthrough--using-an-authorization-item/webhook-authentication-types.html "Webhook authentication types").

To configure an authorization item:

1. In the content tree, navigate to the */sitecore/System/Settings/Webhooks/Authorizations* folder and click the authorization item you want to configure.
2. In the content area, click the **Data** section to show the authorization item fields.
3. Configure the relevant fields, then click **Save**.

### Configure authentication fields correctly
The required fields in an authorization item vary depending on the webhook's [authentication type](https://doc.sitecore.com/sai/en/developers/sitecoreai/content-modeling-and-presentation/workflow/webhooks/walkthrough--using-an-authorization-item/webhook-authentication-types.html). The correct values depend on the identity provider. 

The following is an example authorization item (OAuth2.0 Client Credentials Grant, Azure AD):

```
Authority URL:
https://login.microsoftonline.com/<tenant-id>/v2.0
Client ID:
<your-client-id>
Client Secret:
<your-client-secret>
Scope:
https://graph.microsoft.com/.default
Header Prefix:
Bearer
Additional Endpoint Base Addresses:
https://login.microsoftonline.com/<tenant-id>;https://graph.microsoft.com/oidc/userinfo
```

> [!note]
> <br><br>Common issues: 
> - Using the token endpoint instead of the Authority URL. <br>Sample correct value: `https://login.microsoftonline.com/<tenant-id>/v2.0`
> - Missing Additional Endpoint Base Addresses for Microsoft 
> providers 


## Add an authorization item to a webhook

To add an authorization item to a webhook:

1. In the content tree, click the webhook where you want to add authorization.
2. In the content area, in the **Data** section, in the **Authorization** drop-down menu, click the authorization item that you want to add to the webhook.
3. Click **Save**.