LinkedIn API access tokens - under what circumstances have they been revoked for startups in the past?

September 18th, 2013

Does anyone have stories about LinkedIn's unpredictable revoking of their API access tokens? Any details about the circumstances around how and why startups were denied API access would be helpful.

It seems like certain companies might be more at risk ( e.g. recruiting startups). But a large competitior like Jobvite has seemed to always be able to pulling their users' connections through LinkedIn API requests.

Does a startup need to develop a relationship with someone on a particular LinkedIn team to ensure the token access isn't randomly revoked at some point after launch?

We've developed a feature that consumes the LinkedIn API in accordance with their policies. One thing we are doing is saving parts of the raw response on the client side until the user has a chance to review and re-purpose the data for saving on our site.

I'm interested to know if there are any particular issues we should be thinking about in advance of a launch with regards to the LinkedIn API. We want to ensure a stable reliance on the API going forward, and would like to plan properly. Any stories or details you could share would be great.

Mohammad Forouzani CEO at Forecast.net

September 19th, 2013

I have worked with the linkedin api with many different startups (including the one I am currently a founder of). Basically, the only real point when linkedin will revoke your access is if they deem you to be a "competitor". (or doing something against their TOS)

The truth is, if you are using the linkedin api for anything more than just signing in... you are probably doing something in the "job/recruitment/professional social network" space - so you ARE a competitor.

Once you start hitting their API hard, you should be providing a "benefit" to linkedin's users (as part of linkedin, not just part of your company). If you do, linkedin is unlikely to revoke your access. If not, you better have some really good relationships high up in the linkedin food chain.

Mohammad Forouzani CEO at Forecast.net

September 20th, 2013

I never ran into rate limiting so cant help you there.

Alec Lebedev Team Architect: Proofpoint Social Platform for Archiving

September 19th, 2013

Mohammad, I am curious how you handled 60-date oath token expiration? Did you send users an email asking to re-auth your app with LinkedIn? Do you know if becoming a LinkedIn business partner will help us ge tokens that never expire?

Thanks

Evelyn Hu -

September 21st, 2013

Yes, the one API key that each app gets. Are you serious about this observation (can you point to any links)?

Alec Lebedev Team Architect: Proofpoint Social Platform for Archiving

September 20th, 2013

Good point. Fortunately, we don't have this problem since we only read LinkedIn data and don't need to sync it.

Did you run into any issues with throttle limits? I understand per application and per user throttle limits, but not so clear on per developer throttle limits. How did you set up your LinkedIn app developers?

Evelyn, sorry for hijacking the thread. Hopefully this discussion is useful to you as well.

Alec Lebedev Team Architect: Proofpoint Social Platform for Archiving

September 18th, 2013

We've been dealing with similar issues, Evelyn. So I'd also like to hear how other people dealt with LinkedIn token expiration/revoking policies.

Anonymous

September 21st, 2013

Are you talking about per-user or per-licensee (i.e. your startup) tokens? Because I see plenty discussions online about distate for LinkedIn API apps, and the corresponding instructions to users for revoking the access. Maybe that's what's happening.

Matt Herron Principal at ClearPoint Consulting

September 29th, 2013

I just joined, reluctantly, and may cancel based on these privacy issues. I asked a dozen people to vouch. Many complained, or were concerned it was a phishing attempt (which it really is!!!). I wrote a letter of complaint- no response. only 3-4 people “vouched” and then I was offered membership anyway. They want you to think 1) you should request lots of vouches, 2) you need them all to reply, so they can grow their social network faster. I consider this behavior stealing my social network, and I am not happy about it at all. If it doesn’t get fixed ASAP, I will withdraw from FD.

Alec Lebedev Team Architect: Proofpoint Social Platform for Archiving

September 20th, 2013

Right, but even though the user doesn't need to retype the user name and password, it still requires the user to click on the link, which we are trying to avoid.

You said that keeping in sync with linkedin is a pain. Is that because LinkedIn API changes frequently?

Mohammad Forouzani CEO at Forecast.net

September 20th, 2013

no, the api doesnt change that often, its more the process of diffing and merging of all the different text from all the different entities, and having to do it regularly to stay in sync.

so if you allow users to update something on your website, the next time you try to get their linkedin data, it will be different - you are now out of sync.