OAuth app readiness guide ยท Social
Getting your LinkedIn app ready for real users
Checked against official docsChecked 2026-10-27linkedin.com
Verdict. Signing in and posting as a member is self-serve and instant. Anything for company pages, mentions or analytics is an application LinkedIn can reject, and a rejected app cannot reapply.
01
At a glance
The answer in one screenEase of creation
Easy
Self-serve products are instant. Not tested by us.
Ease of approval
Partner-gated
Community Management API: two reviews, no reapply after rejection.
Your hands-on time
1 hour to days
Minutes for member posting; days to prepare an application and screencast.
Waiting on the provider
Not published
Plan in weeks.
Do you need your own app yet?
Check Composio first.
Composio's guide warns that org actions return 403 unless your auth config requests organization scopes.
Watch out: decisions you can't undo
- Rejection means a new app. Prepare the application carefully the first time.
- A page admin must verify your app. Line up the page admin before you apply.
Agent an agent can do it You needs you Waiting on the provider
02
Prerequisites
What to have readyTo create and connect
- LinkedIn app linked to a company page
For approval (can take days)
- Registered legal organization (commercial use only)
- Business email (personal emails fail vetting)
- Privacy policy and website
- Standard tier: downloadable screencast of each use case
03
App types
Which one is right for an agent product?Recommended for agents
Self-serve products
Sign In with LinkedIn (OIDC), Share on LinkedIn.
- Who can install
- Any member
- Review
- None
- Use it for
- Sign-in and posting as a member
Community Management, Development tier
After an access request is approved.
- Who can install
- Limited
- Review
- Yes
- Use it for
- Building page features
Community Management, Standard tier
After a second review with a screencast.
- Who can install
- Customers
- Review
- Yes
- Use it for
- Company pages, mentions, analytics
04
Creation steps
Who does what, and how long it takes- YouCreate the app and link a page20 minA page super admin verifies the app.
- YouAdd self-serve products5 minSign In with LinkedIn using OpenID Connect, Share on LinkedIn.
- AgentMatch auth config scopes to products10 minRequest only granted scopes.
- AgentDraft the Development tier request1 hourUse case, legal entity, business email, website, privacy policy.
- WaitingDevelopment tier reviewUnknownRejection means a new app.
- YouBuild and record the Standard tier screencastDaysShow OAuth approval and each use case's test cases.
- WaitingStandard tier reviewUnknownRejection again means a new app.
05
Scopes
What each permission costs youYou can only request scopes your approved products grant. LinkedIn rejects the whole authorization if any requested scope is not granted.
| Agent use case | Scopes | What it costs you |
|---|---|---|
| Sign in | openidprofileemail | Self-serve |
| Post as the member | w_member_social | Self-serve |
| Manage company pages | organization scopes | Community Management approval |
Minimal set: "Draft and post" agent
openidprofilew_member_socialNo review needed.
Changing scopes later
- New scopes need the matching product approved first.
- Functional changes may need re-review for Standard tier.
06
Approval and distribution
Review, cost and renewalWhen you need it: Only for page, mention and analytics APIs. Cost: None stated. Renewal: Functional changes may need re-review.
Development tier
Not published
Access request form.Standard tier
Not published
Form plus screencast.What you submit
- Use case
- Legal entity and business email
- Privacy policy
- Screencast for Standard tier
Common rejection reasons
- Personal email
- No registered organization
- Screencast missing a use case
Before approval: what works and what's capped
Build and test
Sign-in and member posting.
Limit: 60-day tokens, no refresh token; users re-consent.
First customers
Development tier, if approved.
Limit: Standard tier needs a second review.
Scale
Standard tier.
Limit: Changes may need re-review.
Marketing API version sunsetVersion 202511 sunsets Nov 16, 2026. Pin a current version. Official docs
07
Data use and compliance
Rules that shape agent design- Data storage requirements apply to Community Management apps and are checked in review.
08
Common blockers
Symptom, cause, fix| Symptom | Cause | Fix |
|---|---|---|
| Whole authorization rejected | Requested a scope your products don't grant | Request only granted scopes |
| Org actions return 403 | Organization scopes not requested or not approved | Get Community Management approval and request org scopes |
| Users disconnected every 60 days | No refresh token for standard apps | Prompt users to reconnect before expiry |
09
Sources
Where every claim comes from| Claim | Source |
|---|---|
| Two-tier review, no reapply after rejection | Official docs |
| Review timelines | Not verified |
All sources
- LinkedIn: Community Management app review learn.microsoft.com
- LinkedIn: Programmatic refresh tokens learn.microsoft.com
- Composio: LinkedIn toolkit guide docs.composio.dev