Step 1: Create a web application

POST {{apiPath}}/environments/{{envID}}/applications

You can use the POST /environments/{{envID}}/applications endpoint to create the new application. The application's protocol property is required, and in this example it specifies an OPENID_CONNECT application. In addition, the tokenEndpointAuthMethod must be set to client_secret_jwt to use a JWT signed by the client secret to authenticate the token request.

The response data returns information about the new application, including its id property, which identifies the UUID for this application resource. You will need the application's UUID property value in Step 2 to get the application secret and in Step 6 to send the authorization request.

Request Body

{"enabled"=>true, "name"=>"WebAppWithMFA_{{$timestamp}}", "description"=>"This is an OIDC Web application.", "type"=>"WEB_APP", "protocol"=>"OPENID_CONNECT", "grantTypes"=>["AUTHORIZATION_CODE"], "redirectUris"=>["https://www.example.com"], "responseTypes"=>["CODE"], "tokenEndpointAuthMethod"=>"CLIENT_SECRET_JWT"}

HEADERS