Bluebeam Service Account — Setup Guide

Overview Use this guide to create and configure a Bluebeam service account in MinuteView Console. This service account uses OAuth authentication with user login to enable system-level access to Bluebeam Studio for:

• Session management — Create, join, and manage Bluebeam Studio sessions from MinuteView workflows
• Document markup — Automate PDF markup and annotation operations
• Workflow automation — Trigger Bluebeam actions from MinuteView Automations

Unlike a third-party Bluebeam account (which is linked to an individual user), a service account operates at the system level with group-based permissions. This means workflows and automations use a shared Bluebeam identity rather than a specific user's personal account.

---

Network Requirements

The Bluebeam service account setup involves an OAuth flow where part of the process happens in the user's browser and part happens on the MinuteView server itself. After the user authenticates with Bluebeam and is redirected back to MinuteView, the server exchanges the authorization code for a token by calling Bluebeam's API directly. This means the MinuteView server must have outbound internet access to the following domains.

Required Firewall / Proxy Whitelist

The following domains must be accessible via HTTPS (port 443) from the server where MinuteView is installed. Whitelist the domain(s) that match your Bluebeam region:

Domain	Region	Purpose
api.bluebeam.com	US	OAuth token exchange, token refresh, and Bluebeam API calls
api.bluebeamstudio.com.au	Australia	OAuth token exchange, token refresh, and Bluebeam API calls
api.bluebeamstudio.eu	Europe	OAuth token exchange, token refresh, and Bluebeam API calls

Server Access Required

These domains must be reachable from the server, not just from the user's PC. The user's browser handles the initial login redirect, but the token exchange and all subsequent API calls are made server-side. If the server cannot reach these domains, the service account setup will fail with a connection error even though the Bluebeam login page loaded successfully in the browser.

---

1) Register App in Bluebeam Developer Portal

1. Sign in to Bluebeam Developer Portal at https://developer.bluebeam.com/
2. Navigate to My Applications → Create New Application
3. Configure:
   • Application Name: e.g. MinuteView Service Integration
   • Application Type: Web Application
   • Redirect URI: You will set this in step 3 below — leave it for now or use a placeholder
4. Click Create Application

Collect Credentials

From the application's Details page, note:

• Client ID
• Client Secret (store securely)

---

2) Choose Your Bluebeam Region

Bluebeam operates separate API endpoints per region. You must use the correct base URL for your region:

Region	API Base URL
United States	https://api.bluebeam.com
Australia	https://api.bluebeamstudio.com.au
Europe	https://api.bluebeamstudio.eu

---

3) Create Service Account in MinuteView Console

1. Navigate to Console → Service Accounts
2. Click New to create a new service account
3. Configure the following settings:

Configuration Fields

Field	Description	Example
Name	A descriptive name for this service account	Bluebeam-ServiceAccount-Prod
Service Account Type	Select BlueBeam from the dropdown
API Base URL	The Bluebeam API URL for your region (see table above)	https://api.bluebeamstudio.com.au
Client ID	The Client ID from the Bluebeam Developer Portal
Client Secret	The Client Secret from the Bluebeam Developer Portal	(sensitive — stored securely)
Scope	OAuth scopes (space-separated)	full_user offline_access
Callback URL	The MinuteView OAuth redirect URI	https://your-server/MinuteView/PageGeneral/ServiceCallback.aspx

4. Before saving: Copy the Callback URL and register it as a redirect URI in the Bluebeam Developer Portal for your app
5. Click Save and Login to save the configuration and begin the OAuth flow

OAuth Authentication Flow

6. You will be redirected to the Bluebeam login page
7. Enter the credentials of the Bluebeam user whose account the service should operate under
8. Authorize MinuteView to access the Bluebeam account
9. You will be redirected back to MinuteView — the service account will show Connected status

---

4) Token Management

MinuteView automatically manages OAuth tokens for this service account:

• Access Token: Used for API calls (short-lived)
• Refresh Token: Used to obtain new access tokens (long-lived)
• Automatic Refresh: MinuteView refreshes tokens before expiration

---

5) Troubleshooting

"Failed to retrieve authentication token" / Connection error

• The most common cause is that the MinuteView server does not have outbound internet access to the Bluebeam API. See Network Requirements above for the domains that must be whitelisted.

Callback URL Mismatch

• Verify the callback URL in the Bluebeam Developer Portal exactly matches the URL shown in MinuteView Console
• Check for trailing slashes or protocol differences (http vs https)

Invalid Client Credentials

• Double-check the Client ID and Client Secret from the Bluebeam Developer Portal
• Verify the application is active

Token Refresh Failures

• Check if the refresh token has expired
• Re-authenticate by clicking the Login button again
• Verify the authenticated user's Bluebeam account is still active