RegisteredCredentials

One non-secret OAuth credential set (client credentials flow). The clientSecret is NOT returned inline (ITD 9): it is revealed once via the SSO-gated secretClaimUrl on the parent response.

  • clientId
    Type: string
    required

    OAuth client ID for authenticating your application (client credentials flow).

  • scopes
    Type: array of string
    required

    OAuth scopes authorized on this client.

  • tokenUrl
    Type: stringFormat: uri
    required

    Token endpoint for this environment. POST client_id + client_secret with grant_type=client_credentials to mint an access token.

Previous
RegisterAppAsDraftResponse
Next
GetAppCredentialsResponse