7.2 Create an OAuth Application

Applications > New Application > OAuth Application

An application contains all of the required configuration information to allow you to create a federated connection using OAuth from Single Sign-on to other OAuth services. A federation connection establishes a trust between Single Sign-on and a service. A service is an application, service, or resource for which you want to provide a single sign-on experience for your users.

The application contains the URL of the OAuth service. The application also contains an appmark that provides simple access to the service with a single sign-on experience for your users. After you save the application, Single Sign-on automatically generates a client ID and a client secret for you to use with the OAuth clients.

  1. Gather the required information about the service to create the application.

  2. (Optional) Select Change Image, then browse and select an image to use for this OAuth application.

  3. Use the following information to configure the OAuth application:

    Application Name

    Specify a unique name for the OAuth application.

    Application Info

    Specify the details about this application to explain what the application contains.

    Enable

    Select Enable to enable this application after you save it.

    Advanced Settings

    Use the information in Configure the OAuth Advanced Settings to define or enable the appropriate options for your environment.

    Redirect URIs

    Specify one or more of the URIs where Single Sign-on redirects the OAuth clients for the OAuth authentication process.

    IMPORTANT:If you do not specify one or more URIs, Single Sign-on does not authenticate the OAuth clients.

    Client ID

    Single Sign-on automatically generates the Client ID for the OAuth application. You can copy the Client ID as needed.

    Client Secret

    Single Sign-on automatically generates the Client Secret for the OAuth application.You can only view the Client Secret when you create the application. You must record the Client Secret for use later.

    Select Generate New Secret if you have forgotten the Client Secret.

    AUTHENICATION CHAINS

    Select an authentication chain, then select Select Chains. The Authentication Chain field is empty when you first create the application.

    NOTE:To select a different authentication chain or to change your selection, Select Chains.

    AUTHORIZATION POLICIES

    (Conditional) Select Authorization Policies to select the appropriate authorization policies for this application.

  4. Create one or more appmarks for the OAuth application.

  5. Select Save to save the OAuth application.

  6. Access the client ID and client secret to configure the OAuth service for a federated connection.

    1. On the Applications page, select the menu for this OAuth application.

    2. Select Edit.

    3. Copy the client ID and the client secret to add to APIs or applications that require authorization with this OAuth application. Where you place them depends on the service to which you are connecting.