Edit OAuth Client

Unique identifier for the OAuth client
Leave empty to keep current secret
Extra audiences added to the ID Token aud alongside the client_id. When more than one distinct audience results, aud becomes an array and an azp claim is emitted.
When set, /authorize only accepts a redirect_uri that matches one of these exactly (RFC 6749 §3.1.2.3, OAuth 2.1 §4.1.1). Leave empty to accept any syntactically valid URI (dev default).
Cancel
About OAuth Clients

OAuth clients are used to authenticate applications requesting tokens from the IdP.

  • Store secrets securely
  • Use unique client IDs
  • Rotate secrets periodically