--- title: "Customer Setup for Exact Online" description: "This guide explains what you, as the customer, need to do in Exact Online and provide to enable the integration between your Exact Online administration and our platform." canonical: "https://docs.cm.com/marketplace/crm-integrations/exact-online-crm/customer-setup-for-exact-online" --- # Customer Setup for Exact Online > This guide explains what you, as the customer, need to do in Exact Online and provide to enable the integration between your Exact Online administration and our platform. Source: https://docs.cm.com/marketplace/crm-integrations/exact-online-crm/customer-setup-for-exact-online This guide explains what you, as the customer, need to do in Exact Online and provide to enable the integration between your Exact Online administration and our platform. The whole process takes about 15–25 minutes. ## 1. Prerequisites Before proceeding, make sure you have the following: - An Exact Online administrator account with the **Manage subscription** right (needed to see **App registrations**). - A shared mailbox controlled by your IT team (for example `exact-api@yourcompany.com`) for the dedicated integration user. - The name of the Exact Online administration (division) you want to connect. \:::info Why the order matters Exact Online gives API access based on the user who authorizes the connection. The integration gets the same rights as that user. We therefore ask you to create a dedicated read-only user first, register the app, and then authorize the connection **as that dedicated user**. \::: --- ## 2. Create a Dedicated Integration User 1. Click your company name in the top-left corner of the Exact Online dashboard. 2. Go to **Master data > Users > Overview** (_Stamgegevens > Gebruikers > Overzicht_). \[Master data menu with Users Overview] 3. Click **New** (_Nieuw_) and select **Exact Online user** as the user type. \[Users overview with the New button] 4. Fill in the details, for example First name `API`, Last name `Integration`. Use the shared mailbox, not a personal email address. \[New user details form] 5. Complete the wizard to send the invitation email. 6. Open the invitation link from the shared mailbox, set a secure password and activate the account. > 💡 **Tip**: Using a shared mailbox means the connection keeps working when an employee changes role or leaves the company. --- ## 3. Restrict the User to Read-Only Access Log back in with your administrator account and configure the rights of the new user: 1. Go to **Master data > Users** and click the new user's name to open the user card. \[Users list to open the user card] 2. In the right-hand column, click **Rights** (_Rechten_). \[User card with the Rights link] 3. Set the rights as shown in the tables below and click **Save**. \[User rights configuration screen] ### General tab | Right | Setting | Why | | - | - | - | | Manage subscription (_Abonnement beheren_) | Checked | Needed to authorize the integration and manage its webhook (event) subscriptions. | | View: Item details (_Bekijken: Artikelgegevens_) | Checked | Lets the integration read product descriptions on order lines. | | Manage apps, Assign rights, View user data, Create/modify/delete requests | Unchecked | Administrative rights the integration does not need. | ### CRM tab | Right | Setting | Why | | - | - | - | | View: Accounts (_Bekijken: Relaties_) | Checked | Allows reading customer records. | | Manage / Create / Edit / Delete accounts | Unchecked | The integration never writes customer data. | ### Sales / Order management tab | Right | Setting | Why | | - | - | - | | View: Sales orders (_Bekijken: Verkooporders_) | Checked | Allows reading order headers and order lines. | | Enter / Manage / Create / Delete sales orders | Unchecked | The integration never creates or changes orders. | **All other tabs** (Contacts, Documents, Financial, etc.): leave every option unchecked. > **Note**: Menu labels can differ slightly per Exact Online package and language. The goal is: view Accounts, view Sales orders, view Item details, and nothing that creates, edits or deletes data. --- ## 4. Register the Internal Application This step is done by an administrator with the **Manage subscription** right. \[User rights with Manage subscription] \[My Exact Online menu] To check that you have this right, click your initials in the top-right corner, open **My Exact Online** and then **Rights**. **Manage subscription** must be listed. ### Steps to Register the App 1. Log in to Exact Online at [https://start.exactonline.nl](https://start.exactonline.nl). 2. Click your **company name** at the top of the screen and select **Import/Export**. \[Company menu with Import/Export] 3. Under the **Other** section, click **App registrations**. \[App registrations link under Other] 4. On first access, review and **Accept** the App Store terms and conditions. 5. Click **New** and fill in the form: - **Application name**: for example `CM.com Marketplace CRM Integration`. - **Redirect URI**: `https://www.cm.com/app/marketplace/oauth/callback` (enter it exactly as shown). 6. Click **Save + Edit**. \[New app registration form] 7. Copy the generated **Client ID** and **Client Secret** and store them securely. \[App registration with Client ID and Client Secret] > ⚠️ **Important**: The Redirect URI must be HTTPS and must match exactly. A different value causes a `401` error during authorization. Do not reuse an old app registration; always create a new one for this integration. --- ## 5. Provide Your Details ### What to Share with Us - **Client ID** - **Client Secret** - **Division**: the code of the Exact Online administration to connect (if you are not sure, share the administration name and we will help you find the code). - **Application name** and **Redirect URI** as registered (for verification). > ⚠️ **Important**: Do not share your credentials publicly or by plain email or chat. Only share them through the secure channel agreed with our team. --- ## 6. Authorize the Connection After our team has configured the integration, you authorize the connection once. This must be done while logged in to Exact Online as the **dedicated integration user** from step 2. 1. Log out of any administrator or personal Exact Online session. 2. Log in to Exact Online as the dedicated integration user. 3. Open the authorization link we provide (or click **Authorize** on the Exact Online integration in the Marketplace). 4. You are redirected to Exact Online. Review the requested access and click **Approve**. 5. You are returned to the Marketplace and the connection becomes active. After this, the integration keeps the connection alive automatically. No further action is needed. --- ## 7. Operational Guidelines - **Do not regenerate or revoke the Client Secret**, and do not delete the app registration. This immediately breaks the connection. If a rotation is needed, coordinate with us first. - **Keep the dedicated user active** with access to the connected administration. If the user is removed, deactivated or loses rights, the integration stops. - **Do not use the same app credentials in other tools.** Exact Online refresh tokens can be used only once; another tool refreshing the token will break the connection. - **Inform us about subscription changes** (cancel, downgrade or changes to the administration structure) in advance.