Create an OIDC application

Follow these steps to create an OpenID Connect integration in your IDaaS account.

1. Navigate to the Applications page.
2. Create a new application by clicking the + button on the top -eft.
3. Select the OIDC button and scroll or search for SPA. Select Generic SPA Application.
4. On the OIDC Settings tab, use the default settings unless mentioned below:
   1. Copy the Client ID. You will need this later.
   2. Add the allowed Login Redirect URI(s) you want your application to route to after login.
   3. Add the allowed Logout Redirect URI(s) you want your application to route to after logout. This is optional.
      tip

      You may want to add localhost during testing and development in order to test your OIDC configuration. Remember to remove this value when going to production!

   4. Set the Subject ID Attribute to the attribute that is used to uniquely identify each user.
   5. For Supported Grant Types, check Authorization Code. If you plan on using Refresh Tokens, check Refresh Token (OIDC).
   6. Under Supported Scopes, select the scopes that are requested during authentication.
   7. Click Save.
5. On the Claims tab, you may configure the claims that will be returned in the Access and/or ID Tokens. This includes claims implied by the selected scopes.
6. On the Resource Rules tab, click the Add Resource Rule button.
7. You will be redirected to Add Resource Rules. Here you can set a name and description.
8. Configure the Authentication Flow you want your users to use when logging in to your application. Click Save. At this point you will have completed all the configuration needed in IDaaS. You are now ready to move on to Protecting your Single Page Application.

tip

If you plan on requesting access tokens for specific audiences see Configuring Resource Audience.