# Authorize a service

Start PKCE OAuth from a valid connect session in the hosted connect UI

**Endpoint:** `POST /api/v1/connect/{serviceId}/authorize`

Starts PKCE OAuth from a valid connect session. The hosted connect UI calls this endpoint; a SaaS API key is not accepted from the browser.