Client workflow

Client credentials are required when an external application (client) must authenticate with and access CONNECT. To use client credentials for client authentication, complete the steps below to create a client and assign it a role.

1. Create client

   Create client credentials that the client can use to authenticate with CONNECT.

2. Assign roles to the client

   Create a role assignment for the client to grant the permissions it needs in CONNECT for the required services, resources, and actions. Assign only the roles required for appropriate access so you can customize permissions for each client.

   • Create new role assignment

3. Maintain the client

   Perform ongoing maintenance tasks for the client, such as rotating secrets, updating access rights, or modifying client details.

   • Edit client description

     Update the client’s description to keep information accurate and up-to-date.

   • Secret rotation

     Generate a new secret for the client to enhance security or replace an expired or compromised secret. For more information, see the following topics:

     • Create client secret

     • Edit client secret

     • Delete client secret

   • Update client access rights

     Modify the client’s group membership or role assignment to reflect changes in access requirements. For more information, see

     • Create new role assignment

4. Decommission the client

   Remove a client that is no longer needed. For more information, see Delete client.