Skip to main content

Configure client credential grants

For each resource server you define, you can configure OIDC and OAuth Web and Server applications to request a JWT access token by using the client credentials grant. The client application uses this token to call the resource server API directly.

To configure this, select the application and then define the scopes that the application can request.

Configure client credential grants​

  1. Click > Security > Resource Server. The Resource Server page appears.
  2. Select API/URL. The APIs/URLs list appears.
  3. Under Actions, click + next to the API/URL. The Add Client Credentials Grant page appears.
  4. Click Add. The Add Client Credentials Grant dialog box appears.
  5. Select the OIDC Application from the drop-down list.
  6. Select the Authorization Scopes for the list of scopes that can be requested to be part of the issued access token for the client credential grant.
  7. Click Add.
  8. Click Save on the Client Credentials Grant page.

The client credential grant is now available for the selected application and scopes.

Edit or delete a client credential grant​

Use the following, as required, to edit or delete a client credential grant.

  • Editing a grant updates the scopes available to new token requests.
  • Existing access tokens remain valid until they expire.

Edit a client credential grant​

  1. Click > Security > Authorization. The Authorization page appears.
  2. Select API/URL. The APIs/URLs list appears.
  3. Click next to the API/URL. The Edit Client Credentials Grant page appears.
  4. Make the required changes.
  5. Click Save.

Delete a client credential grant​

  1. Click > Security > Authorization. The Authorization page appears.
  2. Select API/URL. The APIs/URLs list appears.
  3. Locate the client credential grant and click .
  4. Confirm deletion.
warning

Deleting a client credential grant prevents new access tokens from being issued for that application and scope combination.