Add a hybrid client

Hybrid clients are used by native and server-side web applications. Authentication can be performed using any browser. The server-side code retrieves an access token and a refresh token can also be provided.

Prerequisite

You must have the role of Tenant Administrator to add and manage clients.

Procedure

To add a hybrid client:

1. In the left pane, select Security > Clients.

2. In the Client Type dropdown list, select Hybrid Clients.

3. In the toolbar, select Add Client.

   The Add Client pane appears.

4. In the Name field, enter a name to identify the application that will use this client.

5. (Optional) Select the Allow Refresh Token checkbox if the application uses refresh tokens to keep users logged in to the portal.

6. In the Allowed Redirect URL(s) field, enter a URL and select + to add it to the list.

   The application specifies one of the URLs in this list during authentication, and the CONNECT data services identity server returns the results of the authentication to this URL.

7. (Optional) In the Allowed Logout Redirect URL(s) field, enter a URL and select + to add it to the list.

   The application specifies a URL from this list when it logs out, and the CONNECT data services identity server sends the user to this URL after a successful logout.

8. (Optional) In the Token Lifetime field, enter the length of time in seconds that the access token functions before it expires.

   The default, 3600 seconds (one hour), is the maximum length of time. The minimum value is 60 seconds.

9. Select Next.

   The Create Secret pane opens.

10. (Optional) In the Description field, enter a description for the client secret.

11. In the Expiration Date field, enter a date and time that the secret expires.

    Ensure that the expiration date is valid for the secret. By default, the secret is set to expire one year after creation. Select the Never Expires checkbox to specify that the secret does not expire. Secrets can be deleted later, including secrets that are set to never expire.

12. Select Save.

    The Client Successfully Created window opens and displays the Client Id and Client Secret.

    Important: Select Copy to the right of each field and store the client secret and client Id in a secure place. You need this information to connect your applications. Once the window is closed, the client secret cannot be accessed or retrieved.

13. Select Close.

    Note: In the list of secrets, the Client Id is still visible. If you did not save the client secret, see Maintain a client for instructions on adding a new secret.