# Authenticate a non-logged in or API user To host or join a scheduled meeting as a non-login user, retrieve these two values from the REST API. - **User ID** - pass your email address or retrieve it from the REST API by sending a **GET** request to https://api.zoom.us/v2/users/{userID} - **For individual users, a Zoom Access Key (ZAK)** - send a **GET** request to the https://api.zoom.us/v2/users/{userId}/token with `type="zak"` and pass it to the SDK with [JoinMeetingParam4WithoutLogin](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_service.html#a4e5e3ee6898c6a6f68aee362c48af04a)'s [zak](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_join_param.html#a9f3e5dfb58ec99f457ba5e76c5499db7) or [StartMeetingParamsWithoutLogin](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_service.html#a3b6768f785b4901c44a3fafa2a8b6d0c)'s [zak](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_start_param4_without_login_user.html#a77cba03ef26ad2a7be2f11dd03164845). - **For apps that need to join the meeting as individual users, an OnBehalf Of (OBF) token** - send a GET request to https://api.zoom.us/v2/users/{userId}/token with `type="onbehalf"` and pass it to the SDK with [JoinMeetingParam4WithoutLogin](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_service.html#a4e5e3ee6898c6a6f68aee362c48af04a)'s [onBehalfToken](https://marketplacefront.zoom.us/sdk/meeting/ios/interface_mobile_r_t_c_meeting_join_param.html#a40f6c7c97167737161ba3630d1536cdb). > **Beginning March 2 2026**, apps joining meetings outside their account must be authorized. Authorize apps by using either ZAK or OBF tokens, or RTMS. [Learn more](/docs/meeting-sdk/obf-faq/). See [SDK Authentication](/docs/meeting-sdk/auth) for more details. ## Access the Meeting API See [Using Zoom APIs](/docs/api/using-zoom-apis) to configure your setup and access the Meeting API. ## Get a Zoom Access Key (ZAK) or an OnBehalf Of (OBF) token Once you have the access to the Meeting API, send a GET request to the `/users/me/zak` endpoint to get a Zoom Access Key (ZAK) for individual users, and an On Behalf Of (OBF) token for apps that need to join the meeting as individual users. See [Get user's ZAK](/docs/api/users/#tag/users/GET/users/me/zak) and [SDK Authentication](/docs/meeting-sdk/auth) for details. > Even if the ZAK does expire, DO NOT pass or expose the ZAK token to others after retrieving it.