# Client ID, Secret ID, and Token Creation
Xoxoday uses bearer authentication, where each request must include an HTTP header that includes your Client ID, Secret ID, and Access Token. The following guide explains how to generate your client ID, secret ID, and access tokens from the admin portal.
## Generating Client ID & Secret Key
### Step 1: Use our [marketplace](https://stores.xoxoday.com/) URL to log in to your plum admin account.
### Step 2: Generate Client ID
In the next step, Click "**Settings**" tab from the header and select "**API**" on the left panel.
You can now see the "**Reward API**" tab. Click on the "**Generate Client ID**" button.
A pop-up will appear showing the scope of Integration i.e Plum PRO API, click on the Save button.
You will now be able to find **Client ID** and **Secret ID** on the dashboard as shown below.
### Step 3: Generating Access & Refresh token
Now you have the client id and secret key, you can generate both the access and refresh token by clicking on the " **Generate Token**" button.
**You can copy the newly generated tokens for further use.**
**Note: Once you have both the token, you can manage your tokens via these** [**steps**](https://xoxoday.gitbook.io/plum/developer-resources/overview-of-reward_api/api-endpoints-1/authentication/token-management)
**PLEASE NOTE:**
OAUTH\_URL value for\
**Development -** [ **https://stagingaccount.xoxoday.com/chef**](https://stagingaccount.xoxoday.com/chef)
**Production -** [**https://accounts.xoxoday.com/chef**](https://accounts.xoxoday.com/chef)\
\
