diff --git a/docs/connector.mdx b/docs/connector.mdx
index 5959b622..e42cd073 100644
--- a/docs/connector.mdx
+++ b/docs/connector.mdx
@@ -60,12 +60,16 @@ A user with access to the **Docusign Admin console** must perform this task.
   </Step>
   <Step>
   On the app configuration screen, carefully copy and save the **Client ID** (also called an integration key).
+
+  You'll be asked to classify the integration key. This choice affects production billing and [can't be changed later](https://developers.docusign.com/platform/go-live/#ik-classifications). The key is created and used against your own DocuSign account in both hosting modes, so **Private custom integration** — DocuSign's description is *"used internally by your employees or your customers' employees"* — matches most setups. If you're going through C1's **Custom App (Demo Environment)** field group, you may instead consider **Third-party integration key** — *"using a partner integration that requires your own integration key"* — since C1 is the party invoking it on your behalf; confirm with DocuSign which classification fits your situation before proceeding, since it isn't reversible.
   </Step>
   <Step>
   Click **Add Secret Key**, then carefully copy and save the client secret.
   </Step>
   <Step>
-  In the **Redirect URI** field, enter any URI of your choice (such as http://example.com/callback) and click **Add**.
+  In the **Redirect URI** field:
+    - If you're configuring a **self-hosted** connector, enter any URI of your choice (such as http://example.com/callback) and click **Add**. Nothing needs to be listening at that address — the `--configure` flow prints an authorization URL, and after you authorize, DocuSign redirects your browser there; copy the `code` parameter from the resulting (unreachable) URL and paste it when prompted. Whatever value you register here must also be passed as `--redirect-uri` / `BATON_REDIRECT_URI`, or the authorization and token exchange will fail.
+    - If you're configuring a **Cloud-hosted (demo environment)** connector, enter `https://accounts.conductor.one/oauth/callback` and click **Add**. C1 completes the OAuth flow through this URL; DocuSign rejects the authorization request if it isn't registered here.
   </Step>
   <Step>
   Under **Authentication**, enable **Authorization Code Grant**.