Implicit flow is not available for new apps from December 14, 2026Starting with the Seismic release on December 14, 2026, new apps and new app versions in App Registry can't use the implicit flow. Use Authorization Code with PKCE instead.
Existing implicit apps keep working, and you can still update their redirect URLs. Changing an implicit app's scopes needs a new app version, so it requires moving the app to Authorization Code with PKCE.
To move an existing app, see Migrate from implicit flow to Authorization Code with PKCE.
The steps below outline how to create an HTML/JS page to login with Seismic. The implicit grant flow is most often used when you are creating a web application for your users. The implicit flow will allow users to login via their browser and is intended to be used only for short-term tokens that expire within a few hours.
Steps
- Create an app on App Registration Portal.
- Select authentication method as Implicit Flow.
- Add your auth callback url
Redirect URIsto your application url example:https://YOUR_UI_SERVER/auth_callback. - Save the app.
- No need to generate the
client_secretfrom the app.
Token lifetime
- Access token expiration: 21600 seconds (6 hours)
Get the token
Refer to the Implicit Flow documentation for more details.
The above page provides following examples of client pages for getting token via implicit flow
- Host a client page that will prompt users to login (client.html)
- Host a redirect page and register it with Seismic (popup.html)