Client Management

Client ID

Name

Description

Client Authentication

None

Client Secret

Client Secret JWT

Replay Prevention

Signing Algorithm

Client TLS Certificate

Issuer

Subject DN

You can also extract the Subject DN from a certificate file.

Choose File

Private Key JWT

Replay Prevention

Signing Algorithm

Client Secret

Change Secret

Client Secret Last Changed

Client Secret Retention Period (Minutes)

Use Global Setting

Previous Client Secret(s)

Revoke Previous Secret(s) Revoke Previous Secret(s)

This operation is permanent. Are you sure you want to revoke the previous client secret(s)?

Revoke Previous Secret(s)

Require Pushed Authorization Requests

Require JWT Secured Authorization Response mode

Require Signed Requests

Request Object Signing Algorithm

JWKS URL

JWKS

Redirect URIs

Logo URL

Allow Authentication API Redirectless Mode

Allow

Enable Cookieless Authentication API

Allow

Bypass Authorization Approval

Bypass

Restrict Common Scopes

Restrict ( Selected)

No common scopes are defined under Scope Management

Exclusive Scopes

Allow Exclusive Scopes ( Selected)

No exclusive scopes are defined under Scope Management

Authorization Detail Types

Allow Authorization Details

No Authorization Detail Types are defined

Allowed Grant Types

Authorization Code

Implicit

Refresh Token

Client Credentials

Device Authorization Grant

CIBA

Token Exchange

Resource Owner Password Credentials

Assertion Grants

Access Token Validation (Client is a Resource Server)

Require offline_access Scope To Issue Refresh Tokens

Use Global Setting

Yes

offline_access Require Consent Prompt

Use Global Setting

Yes

Restrict Response Types

Restrict

Default Access Token Manager

Restrict to Default Access Token Manager

Restrict

Validate against all eligible access token managers

Require Proof Key For Code Exchange (PKCE)

Persistent Grants Max Lifetime

Use Global Setting

Grants Do Not Expire

Persistent Grants Idle Timeout

Use Global Setting

Grants Do Not Timeout Due To Inactivity

Reuse Existing Persistent Access Grants for Grant Types

Use Global Setting

Override Global Setting

Implicit

Authorization Code

Resource Owner Password Credentials

Refresh Token Rolling Policy

Use Global Setting

Don't Roll

Roll

Refresh Token Rolling Interval

Use Global Setting

Refresh Token Rolling Grace Period (seconds)

Use Global Setting

OpenID Connect

ID Token Signing Algorithm

The algorithm '' is not supported.

ID Token Key Management Encryption Algorithm

ID Token Content Encryption Algorithm

UserInfo Response Signing Algorithm

The algorithm '' is not supported.

UserInfo Response Key Management Encryption Algorithm

UserInfo Response Content Encryption Algorithm

Policy

Use Pairwise Identifier

Sector Identifier URI

Logout Mode

PingAccess Logout Capable

Back-Channel Logout URI

Session API Endpoints

Allow Access to Session Revocation API

Allow Access to Session Management API

Device Authorization Grant

Use Global Settings

Override

User Authorization URL

Pending Authorization Timeout (seconds)

Device Polling Interval (seconds)

Bypass Activation Code Confirmation

CIBA

Token Delivery Mode

Poll

Ping

Notification Endpoint

Polling Interval (seconds)

Policy

User Code Support

Require CIBA Signed Requests

CIBA Request Object Signing Algorithm

Token Exchange

Processor Policy

Token Introspection

Token Introspection Signing Algorithm

The algorithm '' is not supported.

Token Introspection Key Management Encryption Algorithm

Token Introspection Content Encryption Algorithm

JWT Secured Authorization Response mode (JARM)

JARM Signing Algorithm

The algorithm '' is not supported.

JARM Key Management Encryption Algorithm

JARM Content Encryption Algorithm

Demonstrating Proof-of-Possession (DPoP)

Require DPoP

Malicious Actions Count For Lockout

Use Global Setting

Do Not Lockout