> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Create an OIDC application

Follow these steps to create an OpenID Connect integration in your IDaaS account.

1. Navigate to the **Applications** page.

2. Create a new application by clicking the **+** button on the top -eft.

3. Select the **OIDC** button and scroll or search for **SPA**. Select **Generic SPA Application**.

4. On the **OIDC Settings** tab, use the default settings unless mentioned below:
   ![OIDC Configuration](/assets/images/oidc-configuration-cf176dbb158f6f84128166a68efcbfa4.png)

   1. Copy the **Client ID**. You will need this later.

   2. Add the allowed **Login Redirect URI(s)** you want your application to route to after login.

   3. Add the allowed **Logout Redirect URI(s)** you want your application to route to after logout. This is optional.

   tip
   You may want to add `localhost` during testing and development in order
   to test your OIDC configuration. Remember to remove this value when
   going to production!

   4. Set the **Subject ID Attribute** to the attribute that is used to uniquely identify each user.

   5. For **Supported Grant Types**, check **Authorization Code**. If you plan on using Refresh Tokens, check **Refresh Token (OIDC)**.

   6. Under **Supported Scopes**, select the scopes that are requested during authentication.

   7. Click **Save**.

5. On the **Claims** tab, you may configure the claims that will be returned in the Access and/or ID Tokens. This includes claims implied by the selected scopes.

6. On the **Resource Rules** tab, click the **Add Resource Rule** button.

7. You will be redirected to **Add Resource Rules**. Here you can set a name and description.

8. Configure the Authentication Flow you want your users to use when logging in to your application. Click **Save**. At this point you will have completed all the configuration needed in IDaaS. You are now ready to move on to [Protecting your Single Page Application.](/docs/applications-and-sso/oidc/protecting-spa.md)

tip

If you plan on requesting access tokens for specific audiences see [Configuring Resource Audience](/docs/applications-and-sso/oidc/using-access-tokens.md).