The OAuth method provides secure authentication through Heroku’s OAuth flow.
Self-Hosted Instance Setup
Self-Hosted Instance Setup
Using the Heroku Connection with OAuth on a self-hosted instance of Infisical requires configuring an API client in Heroku and registering your instance with it.Prerequisites:
- A Heroku account with existing applications
- Self-hosted Infisical instance
1
Create an API client in Heroku
Navigate to your user Account settings > Applications to create a new API client.

Create the API client. As part of the form, set the OAuth callback URL to 



https://your-domain.com/integrations/heroku/oauth2/callback
.The domain you defined in the OAuth callback URL should be equivalent to the
SITE_URL
configured in your Infisical instance.
2
Add your Heroku API client credentials to Infisical
Obtain the Client ID and Client Secret for your Heroku API client.
Back in your Infisical instance, add two new environment variables for the credentials of your Heroku API client:

CLIENT_ID_HEROKU
: The Client ID of your Heroku API client.CLIENT_SECRET_HEROKU
: The Client Secret of your Heroku API client.
Setup Heroku OAuth Connection in Infisical
1
Navigate to App Connections
Navigate to the App Connections tab on the Organization Settings page.

2
Add Connection
Select the Heroku Connection option from the connection options modal.

3
Choose OAuth Method
Select the OAuth method and click Connect to Heroku.

4
Grant Access
You will be redirected to Heroku to grant Infisical access to your Heroku account. Once granted, you will be redirected back to Infisical’s App Connections page.

5
Connection Created
Your Heroku Connection is now available for use.
