---
title: "GraphQL API integration"
description: "Step-by-step guide to integrate a web application with Business NXT GraphQL API and initiate the OAuth flow for creating tokens"
lang: en
languages:
  en: https://docs.vismasoftware.no/businessnxtapi/authentication/web/integrations_web/index.md
lastmod: 2026-07-10
---

> Documentation index: https://docs.vismasoftware.no/businessnxtapi/authentication/web/llms.txt


# GraphQL API integration

Last modified July 10, 2026

> Step-by-step guide to integrate a web application with Business NXT GraphQL API and initiate the OAuth flow for creating tokens


After the approval of the registration of your web application, you can add integrations to Visma APIs. To integrate with Business NXT GraphQL API do the following:

1. Select your application from the **My Applications** main tab and go to **Integrations**.
    ![Integrations tab](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup06.png)
2. Press the **New integration** button.
3. Search and select the **Business NXT Graphql API** in the combo with available APIs and press **Continue**.
    ![Select API](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup07.png)
    If you plan to use the client credentials grant type, then you need search for **Business NXT GraphQL Service API** in the combo with available APIs and press **Continue**.
    ![Select API](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup07s.png)
4. Select the `business-graphql-api:access-group-based` scope for read-write access, or the `business-graphql-api:access-group-based-readonly` scope for read-only access (or `business-graphql-service-api:access-group-based` / `business-graphql-service-api:access-group-based-readonly` if you seleced **Business NXT Graphql Service API** in the previous step) and press **Continue**.
    ![Select scope](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup08.png)
5. Review the selection and confirm the integration by pressing the **Confirm Integration** button.
    ![Confirm integration](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup09.png)
6. Wait for the integration to be approved by Visma.
    ![Wait for approval](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup10.png)
    Once approved, the integrations become active.
    ![Application overview](https://docs.vismasoftware.no/businessnxtapi/authentication/web/app_setup11.png)

Once your application is integrated with **Business NXT Graphql API**, you can initiate the OAuth flow and create tokens.

The minimum required claims for a valid OAuth 2.0 JWT token are:

```text
Default OAuth 2.0 Claim required:
    sub
Scope Claims required:
    email
    openid
    business-graphql-api:access-group-based
```

Company access is determined by the corresponding user for whom the OAuth JWT token was created. The rights for the user are managed in Visma.net.

---

[View this page](https://docs.vismasoftware.no/businessnxtapi/authentication/web/integrations_web/)