Learn how to configure a Heroku Connection for Infisical using OAuth or Auth Token methods.
Infisical supports two methods for connecting to Heroku: OAuth and Auth Token. Choose the method that best fits your setup and security requirements.
The OAuth method provides secure authentication through Heroku’s OAuth flow.
Self-Hosted Instance Setup
Using the Heroku Connection with OAuth on a self-hosted instance of Infisical requires configuring an API client in Heroku and registering your instance with it.
Prerequisites:
Create an API client in Heroku
Navigate to your user Account settings > Applications to create a new API client.
Create the API client. As part of the form, set the OAuth callback URL to https://your-domain.com/integrations/heroku/oauth2/callback
.
The domain you defined in the OAuth callback URL should be equivalent to the SITE_URL
configured in your Infisical instance.
Add your Heroku API client credentials to Infisical
Obtain the Client ID and Client Secret for your Heroku API client.
Back in your Infisical instance, add two new environment variables for the credentials of your Heroku API client:
CLIENT_ID_HEROKU
: The Client ID of your Heroku API client.CLIENT_SECRET_HEROKU
: The Client Secret of your Heroku API client.Once added, restart your Infisical instance and use the Heroku Connection.
Navigate to App Connections
Navigate to the App Connections tab on the Organization Settings page.
Add Connection
Select the Heroku Connection option from the connection options modal.
Choose OAuth Method
Select the OAuth method and click Connect to Heroku.
Grant Access
You will be redirected to Heroku to grant Infisical access to your Heroku account. Once granted, you will be redirected back to Infisical’s App Connections page.
Connection Created
Your Heroku Connection is now available for use.