DATEV OAuth2 Hybrid Flow

The OAuth2 Hybrid Flow from DATEV is a special variation of the normal OAuth2 flow with grant type "Authorization Code". However, you do not have to worry about the differences here, since almost everything is entered automatically for you.


images/download/attachments/189459792/1005-version-2-modificationdate-1742976070784-api-v2.png


If checkbox "DATEV-Datenservices " (1) is set in the HTTP channel, you will once get an additional dialogue "DATEVconnect online" for the DATEV OAuth2 configuration (3) during the first configuration when you click button "Configure OAuth2.0" (2) .


images/download/attachments/189459792/1000-version-2-modificationdate-1742976164918-api-v2.png


Depending on the selected environment ("Sandbox" or "Productive") in selection field "System", the corresponding parameters are then automatically entered in the following dialogue (in addition, the "OAuth2 Refresh URL" is set in the HTTP channel).


images/download/attachments/189459792/1006-version-3-modificationdate-1742976391620-api-v2.png

images/download/attachments/189459792/1007-version-3-modificationdate-1742976402532-api-v2.png


You will get the "Client ID" and the "Client Secret" (4) from DATEV.

You might have to adjust the "Redirection URL" (5) (must be accessible from outside).

After you click button "Fetch Access Token" (6), another dialogue will take you to the DATEV authorisation page.


images/download/attachments/189459792/DATEV_Benutzerkonto_1_EN-version-1-modificationdate-1737433808992-api-v2.png

images/download/attachments/189459792/DATEV_Benutzerkonto_2_EN-version-1-modificationdate-1737433808991-api-v2.png

images/download/attachments/189459792/DATEV_Benutzerkonto_3_EN-version-2-modificationdate-1742203823379-api-v2.png


Log in there with your DATEV user account access data and grant Lobster Integration access authorization.

The "Redirection URL" (5) will take you back to Lobster Integration and you will then ultimately get the Access Token.

You will find an entry with the name "SYS_HTTP_OAUTH2" in the additional IDs for the access token and an entry with the name "SYS_HTTP_OAUTH2_REFRESH" for a refresh token.