LinkedIn Ads OAuth: r_emailaddress and r_liteprofile scopes deprecated

[GuillermoTM]

Connector Name

linkedin-ads

Connector Version

5.6.2

What step the error happened?

During OAuth authentication (before any sync)

Relevant information

Airbyte includes deprecated LinkedIn scopes (r_emailaddress, r_liteprofile) in the OAuth authorization request. For new LinkedIn developer apps, these scopes are no longer authorized and LinkedIn rejects the request with an unauthorized_scope error.

Steps to reproduce

1. Create LinkedIn Ads dev app
2. Start LinkedIn Ads source in Airbyte Cloud
3. Click Authenticate
4. LinkedIn returns error due to deprecated scopes

Expected behavior

OAuth should succeed. Airbyte should not request deprecated scopes; only supported scopes should be used.

Actual behavior

LinkedIn blocks OAuth flow with unauthorized_scope error when requesting r_emailaddress and r_liteprofile.

• Airbyte UI shows:
  "OAuth login failed: Scope 'r_emailaddress' is not authorized for your application"

OAuth URL generated by Airbyte (sanitized)

https://www.linkedin.com/oauth/v2/authorization?client_id=86j65lhno0aavc&redirect_uri=https%3A%2F%2Fcloud.airbyte.com%2Fauth_flow&response_type=code&scope=r_ads_reporting+r_emailaddress+r_liteprofile+r_ads+r_basicprofile+r_organization_social&state=pbMwDQM

Suggested fix

Remove deprecated scopes (r_emailaddress, r_liteprofile, r_basicprofile) and update to valid LinkedIn scopes. If email/profile are needed, use OpenID Connect scopes like openid, profile, email.

Environment

• Airbyte: Cloud
• LinkedIn App Type: Production ( my own )
• Browser: Brave

Evidence

• LinkedIn OAuth screen redirects back with an error.
• Airbyte UI shows:
  "OAuth login failed: Scope 'r_emailaddress' is not authorized for your application"
• See attached screenshot.

External references

• Stack Overflow: https://stackoverflow.com/questions/77016303/dont-have-r-emailaddress-or-r-liteprofile-scopes-in-linkedin-app-api
• Auth0 Community (LinkedIn deprecation): https://community.auth0.com/t/the-linkedin-login-is-deprecated-updating-to-the-new-scopes-is-necessary/113696

Related issues

Related issue:: #68679

Relevant log output

Contribute

• Yes, I want to contribute

---

Internal Tracking: https://github.com/airbytehq/oncall/issues/11168

[octavia-bot]

AI Triage Starting...

Thank you for opening this issue! I'm an AI assistant that will help with initial triage.

I'll review your issue and:

• Ask clarifying questions if needed
• Provide immediate guidance if available
• Escalate to the appropriate team if this requires engineering attention

View playbook

• 🔗 Session URL: https://app.devin.ai/sessions/7e3af976637c49f683061b9f0d95d7fd

✅ Devin AI session created successfully!

[devin-ai-integration]

Hi @GuillermoTM, thank you for reporting this issue with detailed reproduction steps and evidence!

I can confirm this is a valid bug. LinkedIn has deprecated the r_emailaddress, r_liteprofile, and r_basicprofile OAuth scopes, and Airbyte's OAuth flow is still requesting them. This causes authentication to fail for new LinkedIn developer apps with the "unauthorized_scope" error you're seeing.

What's happening:

• Airbyte Cloud's OAuth configuration includes deprecated LinkedIn scopes
• New LinkedIn apps don't have access to these legacy scopes
• LinkedIn rejects the OAuth request, blocking authentication

Related issue: This is also reported in #68679

I'm escalating this to our internal team for investigation and will update this issue with a tracking link shortly.

---

This message is generated from Devin.ai (internal session link).

[devin-ai-integration]

This issue has been escalated to our internal team for investigation: https://github.com/airbytehq/oncall/issues/11168

The team will review the OAuth scope configuration and work on removing the deprecated scopes. I've also linked the related issue #68679 in the escalation for visibility.

---

This message is generated from Devin.ai (internal session link).

[meyerovb]

I just now ran into this too. Workaround: the little window that pops up and displays an error will close after a few seconds. Before it does, click the url and copy it. Then open a new tab, paste, and take out the bad scopes. Once you finish logging in the airbyte tab should show authenticated now.

[GuillermoTM]

Thanks for sharing the workaround.

Confirming this works as a temporary manual bypass, but it’s not a viable long-term solution since it requires modifying the OAuth URL by hand. This still blocks standard OAuth flows for new LinkedIn apps.

Looking forward to the official fix removing the deprecated scopes.