---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: [Extend, ISU Authentication, Simplified ISU]
nav: wcp_docs
parent_url: /wcp_docs/
title: Modify Authorized Non-Development Tenants for API Clients using ISU Authentication
layout: subsection
---

### Prerequisites

-   An Extend or Integration app that's been deployed and configured in the non-Development tenant, such as the Implementation (IMPL), Sandbox (SBOX), or Production (PROD) tenant.
-   The simplified ISU authentication has been configured for the app in the non-Development tenant.

    The simplified ISU authentication setup creates a tenant-specific API client for the app and ISU. See [Steps: Set Up ISU Authentication for Apps](/wcp_docs/GUID-3277fec3-24c9-41da-9840-c61b41033f28-enHYPHENus.html).

    <b>Note:</b> You only need to perform the ISU setup the first time you promote the app to a tenant.

-   Company Administrator access to modify authorized tenants for API Clients.


### Context

Development tenants are automatically authorized for all of your account's API clients. However, non-Development tenants are not automatically authorized for API clients.

When promoting an app that uses the simplified ISU authentication to a non-Development tenant, a Company Administrator must add consent to the non-Development tenant as an authorized tenant for the app's tenant-specific API Client.

<b>Note:</b> After a refresh of IMPL and SBOX tenants from the PROD tenant, the IMPL and SBOX tenants will be associated with the API Client for the PROD tenant. Therefore, the Company Administrator must add consent for each of the IMPL and SBOX tenants to the PROD API Client. See <i>Tenant Refresh from Production</i> in [Concept: ISU Authentication](/wcp_docs/GUID-cb3e0fcd-bb97-4005-8d10-3a02e88dab71-enHYPHENus.html).

### Steps

1.  On the Developer Site menu, select <b>Console</b> &gt; <b>API Clients</b>.
2.  Select the API client for your app and non-Development tenant.

    To find the API client for your app or ISU, search for <b>app:</b> or <b>isu:</b> in the <b>All Clients</b> tab. Ensure that you select the API client for the app in the corresponding non-Development tenant.

3.  Click <b>Modify Authorized Tenants</b>.
4.  In the <b>Authorized Tenants</b> list, select each non-Development tenant you’re promoting the app to.
5.  Click <b>Save Changes</b>.


### Related Information

[Steps: Set Up Integration System User Authentication for Apps](/wcp_docs/GUID-df4dc996-523f-46af-a98c-ec8380550a3f.html)

[Steps: Set Up ISU Authentication for Apps](/wcp_docs/GUID-3277fec3-24c9-41da-9840-c61b41033f28-enHYPHENus.html)

[Concept: ISU Authentication](/wcp_docs/GUID-cb3e0fcd-bb97-4005-8d10-3a02e88dab71-enHYPHENus.html)