Register the SDKs as an OAuth 2.0 client application
The OAuth 2.0 client profile defines how an application connects to AM to obtain OAuth 2.0 tokens.
To allow the SDKs to connect to AMd and obtain OAuth 2.0 tokens, you must register an OAuth 2.0 client application.
This client application defines how the SDKs will connect and obtain tokens.
To register the SDKs as an OAuth 2.0 application in AM, follow these steps:
-
Log in to the AM admin UI as an administrator.
-
Navigate to Applications > OAuth 2.0 > Clients, and then click Add Client.
-
In Client ID, enter
sdkPublicClient
. -
Leave Client secret empty.
-
In Redirection URIs, enter the following values:
https://sdkapp.example.com:8443/callback https://react.example.com:8443/callback https://angular.example.com:8443 https://com.example.reactnative.todo/callback https://com.example.flutter.todo/callback
Also add any other domains where you will be hosting SDK applications. -
In Scopes, enter the following values:
openid profile email address phone
-
Click Create.
AM creates the new OAuth 2.0 client, and displays the properties for further configuration.
-
On the Core tab:
-
In Client type, select
Public
. -
Disable Allow wildcard ports in redirect URIs.
-
Click Save Changes.
-
-
On the Advanced tab:
-
In Grant Types, enter the following values:
Authorization Code Refresh Token
-
In Token Endpoint Authentication Method, select
None
. -
Enable the Implied consent property.
-
-
Click Save Changes.