This integration is single-tenant. The QuickBooks company is authorized once by the operator via Intuit's OAuth 2.0 flow, and the resulting refresh token is stored securely on the server.
The operator initiates the OAuth flow through Intuit's authorization endpoint.
Intuit prompts for sign-in and consent on the selected QuickBooks company.
Intuit redirects back with an authorization code, which the server exchanges for an access token and a long-lived refresh token.
The integration is then live until the operator chooses to disconnect.
End users of the internal AI assistant do not see or interact with this flow.