Implicit Grant Authentication | Docusign

Implicit Grant is an OAuth 2.0 flow that is used to grant an access token to integrations that are not able to store sensitive data on a secure server, such as those that are native to mobile devices.

In the Implicit Grant flow, your integration requests an access token directly. This is potentially less secure because the access token must be stored on the user’s device, but it does not require that the integration have access to a web server.

Alert: Public Authorization Code Grant should be used rather than Implicit Grant whenever possible. Neither Public Authorization Code Grant nor Implicit Grant require access to a web server to secure a client secret, but Public Authorization Code Grant provides greater security.