Access tokens provide access to Canvas resources through the Canvas API. They can be generated automatically for third-party applications or created manually.

Using the Canvas API, the person or program with the access token can access the same Canvas resources as you. For example, third-party applications, including devices you have used to open the Canvas Student app, are authorized to access Canvas on your behalf.

The Access Token is presented as a long alphanumeric code called a value.

You can request a Canvas access token using the Canvas Access Token Request form.

If approved, a UW-Madison Canvas admin will generate an access token on your behalf. You'll receive a follow up email with a link to a secure note in 1Password.

Note: The shared link will expire 7 days after you receive it. Treat the access token value like a password, and keep it in a secure place, such as your 1Password account.

Once you have the access token value saved securely, you will need to activate the token within Canvas.

For instructions on how to view and activate a token, see this guide from Instructure:  How do I manage API access tokens in my user account?

When you request an access token through this form, it will expire within a maximum of 120 days from their creation. Or, you can request an expiration date that is sooner when filling out the form. The access token will automatically expire after this expiration date.

If the token needs to be removed for security reasons, or if it is no longer necessary prior to the expiration date, please contact the DoIT Help Desk. https://kb.wisc.edu/1