Announcement: Migrating authentication information for Make API call step

Zendesk is making some changes in Flow Builder to improve your account security and bot experience.

With the first release of the Make API call step in Flow Builder, admins had to manually enter authorization information such as the key or credentials into headers in order to authenticate REST API calls.

We recently released API Connections to provide admins with a more secure way to store API credentials for a service or system. These connections can be used to authenticate REST API calls when using the Make API call step in Flow Builder.

Starting May 31, 2023, API Connections will become the default experience to manage API credentials. As of this date, API calls will no longer function if they are configured with any authorizations set in the header including (but not limited to):

• AUTHORIZATION
• X-API-KEY
• X-API-TOKEN

What you need to do

To avoid any disruption to your bot experience, you need to make the following to update to your API call steps in Flow Builder before May 31, 2023.

To update Make an API call to connections

1. Create API connections in Admin Center > Apps and integrations > Connections.
   
   
2. Update Make API call step in Flow Builder to use the newly created API connection by selecting the connection under the Authentication dropdown.
   
   
3. In the Make API call step, delete the header containing the authentication information.
   
   
4. Test the Make API call step with the new connection. You do not need to re-save the variables.
   
5. When successful, click Done to save the answer changes.
6. Publish the bot to deploy the changes.