using Auth0.ManagementApi;
using System.Threading.Tasks;

public partial class Examples
{
    public async Task Example() {
        var client = new ManagementApiClient(
            token: "<token>",
            clientOptions: new ClientOptions { BaseUrl = "https://{YOUR_DOMAIN}/api/v2" }
        );

        await client.Clients.UpdateAsync(
            id: "id",
            request: new UpdateClientRequestContent()
        );
    }

}

package example

import (
    context "context"

    management "github.com/auth0/go-auth0/v3/management"
    client "github.com/auth0/go-auth0/v3/management/client"
    option "github.com/auth0/go-auth0/v3/management/option"
)

func do() {
    mgmt, err := client.New(
        "{YOUR_DOMAIN}",
        option.WithToken(
            "<token>",
        ),
    )
    if err != nil {
        return
    }
    request := &management.UpdateClientRequestContent{}
    mgmt.Clients.Update(
        context.TODO(),
        "id",
        request,
    )
}

package com.example.usage;

import com.auth0.client.mgmt.ManagementApi;
import com.auth0.client.mgmt.types.UpdateClientRequestContent;

public class Example {
    public static void main(String[] args) {
        ManagementApi client = ManagementApi
            .builder()
            .domain("{YOUR_DOMAIN}")
            .token("<token>")
            .build();

        client.clients().update(
            "id",
            UpdateClientRequestContent
                .builder()
                .build()
        );
    }
}

<?php

namespace Example;

use Auth0\SDK\API\Management\Wrapper\ManagementClient;
use Auth0\SDK\API\Management\Wrapper\ManagementClientOptions;
use Auth0\SDK\API\Management\Clients\Requests\UpdateClientRequestContent;

$client = new ManagementClient(new ManagementClientOptions(
    domain: '{YOUR_DOMAIN}',
    token: '<token>',
));
$client->clients->update(
    'id',
    new UpdateClientRequestContent([]),
);

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.clients.update("id", {});
}
main();

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.clients.update("id", {});
}
main();

curl --request PATCH \
  --url https://{tenantDomain}/api/v2/clients/{id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "description": "<string>",
  "client_secret": "<string>",
  "logo_uri": "<string>",
  "callbacks": [
    "<string>"
  ],
  "oidc_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "selected_initiators": []
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "oidc_backchannel_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "selected_initiators": []
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "session_transfer": {
    "can_create_session_transfer_token": false,
    "enforce_cascade_revocation": true,
    "allowed_authentication_methods": [],
    "enforce_device_binding": "ip",
    "allow_refresh_token": false,
    "enforce_online_refresh_tokens": true,
    "delegation": {
      "allow_delegated_access": false,
      "enforce_device_binding": "ip"
    }
  },
  "allowed_origins": [
    "<string>"
  ],
  "web_origins": [
    "<string>"
  ],
  "grant_types": [
    "<string>"
  ],
  "client_aliases": [
    "<string>"
  ],
  "allowed_clients": [
    "<string>"
  ],
  "allowed_logout_urls": [
    "<string>"
  ],
  "jwt_configuration": {
    "lifetime_in_seconds": 36000,
    "secret_encoded": true,
    "scopes": {},
    "alg": "HS256"
  },
  "encryption_key": {
    "pub": "<string>",
    "cert": "<string>",
    "subject": "<string>"
  },
  "sso": true,
  "cross_origin_authentication": true,
  "cross_origin_loc": "<string>",
  "sso_disabled": true,
  "custom_login_page_on": true,
  "token_endpoint_auth_method": "none",
  "is_token_endpoint_ip_header_trusted": false,
  "is_first_party": true,
  "oidc_conformant": false,
  "custom_login_page": "<string>",
  "custom_login_page_preview": "<string>",
  "token_quota": {
    "client_credentials": {
      "enforce": true,
      "per_day": 1073741824,
      "per_hour": 1073741824
    }
  },
  "identity_assertion_authorization_grant": {
    "active": false
  },
  "anonymous_sessions": {
    "active": false
  },
  "enforce_anon_session_transfer_network_binding": "ip",
  "form_template": "<string>",
  "addons": {
    "aws": {
      "principal": "<string>",
      "role": "<string>",
      "lifetime_in_seconds": 22050
    },
    "azure_blob": {
      "accountName": "<string>",
      "storageAccessKey": "<string>",
      "containerName": "<string>",
      "blobName": "<string>",
      "expiration": 1,
      "signedIdentifier": "<string>",
      "blob_read": true,
      "blob_write": true,
      "blob_delete": true,
      "container_read": true,
      "container_write": true,
      "container_delete": true,
      "container_list": true
    },
    "azure_sb": {
      "namespace": "<string>",
      "sasKeyName": "<string>",
      "sasKey": "<string>",
      "entityPath": "<string>",
      "expiration": 123
    },
    "sentry": {
      "org_slug": "<string>",
      "base_url": "<string>"
    },
    "box": {},
    "cloudbees": {},
    "concur": {},
    "dropbox": {},
    "echosign": {
      "domain": "<string>"
    },
    "egnyte": {
      "domain": "<string>"
    },
    "firebase": {
      "secret": "<string>",
      "private_key_id": "<string>",
      "private_key": "<string>",
      "client_email": "<string>",
      "lifetime_in_seconds": 123
    },
    "newrelic": {
      "account": "<string>"
    },
    "office365": {
      "domain": "<string>",
      "connection": "<string>"
    },
    "salesforce": {
      "entity_id": "<string>"
    },
    "salesforce_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "salesforce_sandbox_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "samlp": {
      "mappings": {},
      "audience": "<string>",
      "recipient": "<string>",
      "createUpnClaim": true,
      "mapUnknownClaimsAsIs": true,
      "passthroughClaimsWithNoMapping": true,
      "mapIdentities": true,
      "signatureAlgorithm": "<string>",
      "digestAlgorithm": "<string>",
      "issuer": "<string>",
      "destination": "<string>",
      "lifetimeInSeconds": 123,
      "signResponse": true,
      "nameIdentifierFormat": "<string>",
      "nameIdentifierProbes": [
        "<string>"
      ],
      "authnContextClassRef": "<string>"
    },
    "sap_api": {
      "clientid": "<string>",
      "usernameAttribute": "<string>",
      "tokenEndpointUrl": "<string>",
      "scope": "<string>",
      "servicePassword": "<string>",
      "nameIdentifierFormat": "<string>"
    },
    "sharepoint": {
      "url": "<string>",
      "external_url": [
        "<string>"
      ]
    },
    "springcm": {
      "acsurl": "<string>"
    },
    "wams": {
      "masterkey": "<string>"
    },
    "wsfed": {},
    "zendesk": {
      "accountName": "<string>"
    },
    "zoom": {
      "account": "<string>"
    },
    "sso_integration": {
      "name": "<string>",
      "version": "<string>"
    },
    "oag": {}
  },
  "client_metadata": {},
  "mobile": {
    "android": {
      "app_package_name": "",
      "sha256_cert_fingerprints": [
        "<string>"
      ]
    },
    "ios": {
      "team_id": "",
      "app_bundle_identifier": ""
    }
  },
  "initiate_login_uri": "<string>",
  "native_social_login": {
    "apple": {
      "enabled": false
    },
    "facebook": {
      "enabled": false
    },
    "google": {
      "enabled": false
    }
  },
  "fedcm_login": {
    "google": {
      "is_enabled": false
    }
  },
  "refresh_token": {
    "rotation_type": "non-rotating",
    "expiration_type": "non-expiring",
    "leeway": 0,
    "token_lifetime": 78894000,
    "infinite_token_lifetime": true,
    "idle_token_lifetime": 2,
    "infinite_idle_token_lifetime": false,
    "policies": [
      {
        "audience": "<string>",
        "scope": [
          "<string>"
        ]
      }
    ]
  },
  "default_organization": {
    "organization_id": "<string>",
    "flows": [
      "client_credentials"
    ]
  },
  "organization_usage": "deny",
  "organization_require_behavior": "no_prompt",
  "organization_discovery_methods": [],
  "client_authentication_methods": {},
  "require_pushed_authorization_requests": false,
  "require_proof_of_possession": false,
  "signed_request_object": {
    "required": false,
    "credentials": [
      {
        "id": "<string>"
      }
    ]
  },
  "skip_non_verifiable_callback_uri_confirmation_prompt": true,
  "token_exchange": {
    "allow_any_profile_of_type": []
  },
  "par_request_expiry": 305,
  "express_configuration": {
    "initiate_login_uri_template": "<string>",
    "user_attribute_profile_id": "<string>",
    "connection_profile_id": "<string>",
    "enable_client": true,
    "enable_organization": true,
    "okta_oin_client_id": "<string>",
    "admin_login_domain": "<string>",
    "linked_clients": [
      {
        "client_id": "<string>"
      }
    ],
    "oin_submission_id": "<string>"
  },
  "b2b_integration_configuration": {
    "sso_profiles": [
      "<string>"
    ]
  },
  "my_organization_configuration": {
    "allowed_strategies": [],
    "connection_deletion_behavior": "allow",
    "connection_profile_id": "<string>",
    "user_attribute_profile_id": "<string>",
    "invitation_landing_client_id": "<string>",
    "enforce_permission_ceiling": false,
    "enforce_self_assignment_restriction": false
  },
  "async_approval_notification_channels": [],
  "oidc_support": {
    "is_allowed": true,
    "allow_all_scopes": true,
    "allowed_scopes": []
  }
}
'

{
  "client_id": "AaiyAPdpYdesoKnqjj8HJqRn4T5titww",
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z",
  "tenant": "",
  "name": "My application",
  "description": "",
  "global": false,
  "client_secret": "MG_TNT2ver-SylNat-_VeMmd-4m0Waba0jr1troztBniSChEw0glxEmgEi2Kw40H",
  "app_type": "native",
  "logo_uri": "<string>",
  "is_first_party": false,
  "oidc_conformant": false,
  "callbacks": [
    "<string>"
  ],
  "allowed_origins": [
    "<string>"
  ],
  "web_origins": [
    "<string>"
  ],
  "client_aliases": [
    "<string>"
  ],
  "allowed_clients": [
    "<string>"
  ],
  "allowed_logout_urls": [
    "<string>"
  ],
  "session_transfer": {
    "can_create_session_transfer_token": false,
    "enforce_cascade_revocation": true,
    "allowed_authentication_methods": [
      "cookie"
    ],
    "enforce_device_binding": "ip",
    "allow_refresh_token": false,
    "enforce_online_refresh_tokens": true,
    "delegation": {
      "allow_delegated_access": false,
      "enforce_device_binding": "ip"
    }
  },
  "oidc_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "mode": "custom",
      "selected_initiators": [
        "rp-logout"
      ]
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "grant_types": [
    "<string>"
  ],
  "jwt_configuration": {
    "lifetime_in_seconds": 36000,
    "secret_encoded": true,
    "scopes": {},
    "alg": "HS256"
  },
  "signing_keys": [
    {
      "pkcs7": "",
      "cert": "",
      "subject": ""
    }
  ],
  "encryption_key": {
    "pub": "<string>",
    "cert": "<string>",
    "subject": "<string>"
  },
  "sso": false,
  "sso_disabled": false,
  "cross_origin_authentication": true,
  "cross_origin_loc": "<string>",
  "custom_login_page_on": true,
  "custom_login_page": "",
  "custom_login_page_preview": "",
  "form_template": "",
  "addons": {
    "aws": {
      "principal": "<string>",
      "role": "<string>",
      "lifetime_in_seconds": 22050
    },
    "azure_blob": {
      "accountName": "<string>",
      "storageAccessKey": "<string>",
      "containerName": "<string>",
      "blobName": "<string>",
      "expiration": 1,
      "signedIdentifier": "<string>",
      "blob_read": true,
      "blob_write": true,
      "blob_delete": true,
      "container_read": true,
      "container_write": true,
      "container_delete": true,
      "container_list": true
    },
    "azure_sb": {
      "namespace": "<string>",
      "sasKeyName": "<string>",
      "sasKey": "<string>",
      "entityPath": "<string>",
      "expiration": 123
    },
    "rms": {
      "url": "<string>"
    },
    "mscrm": {
      "url": "<string>"
    },
    "slack": {
      "team": "<string>"
    },
    "sentry": {
      "org_slug": "<string>",
      "base_url": "<string>"
    },
    "box": {},
    "cloudbees": {},
    "concur": {},
    "dropbox": {},
    "echosign": {
      "domain": "<string>"
    },
    "egnyte": {
      "domain": "<string>"
    },
    "firebase": {
      "secret": "<string>",
      "private_key_id": "<string>",
      "private_key": "<string>",
      "client_email": "<string>",
      "lifetime_in_seconds": 123
    },
    "newrelic": {
      "account": "<string>"
    },
    "office365": {
      "domain": "<string>",
      "connection": "<string>"
    },
    "salesforce": {
      "entity_id": "<string>"
    },
    "salesforce_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "salesforce_sandbox_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "samlp": {
      "mappings": {},
      "audience": "<string>",
      "recipient": "<string>",
      "createUpnClaim": true,
      "mapUnknownClaimsAsIs": true,
      "passthroughClaimsWithNoMapping": true,
      "mapIdentities": true,
      "signatureAlgorithm": "<string>",
      "digestAlgorithm": "<string>",
      "issuer": "<string>",
      "destination": "<string>",
      "lifetimeInSeconds": 123,
      "signResponse": true,
      "nameIdentifierFormat": "<string>",
      "nameIdentifierProbes": [
        "<string>"
      ],
      "authnContextClassRef": "<string>"
    },
    "layer": {
      "providerId": "<string>",
      "keyId": "<string>",
      "privateKey": "<string>",
      "principal": "<string>",
      "expiration": 1
    },
    "sap_api": {
      "clientid": "<string>",
      "usernameAttribute": "<string>",
      "tokenEndpointUrl": "<string>",
      "scope": "<string>",
      "servicePassword": "<string>",
      "nameIdentifierFormat": "<string>"
    },
    "sharepoint": {
      "url": "<string>",
      "external_url": [
        "<string>"
      ]
    },
    "springcm": {
      "acsurl": "<string>"
    },
    "wams": {
      "masterkey": "<string>"
    },
    "wsfed": {},
    "zendesk": {
      "accountName": "<string>"
    },
    "zoom": {
      "account": "<string>"
    },
    "sso_integration": {
      "name": "<string>",
      "version": "<string>"
    },
    "oag": {}
  },
  "token_endpoint_auth_method": "none",
  "is_token_endpoint_ip_header_trusted": false,
  "client_metadata": {},
  "mobile": {
    "android": {
      "app_package_name": "",
      "sha256_cert_fingerprints": [
        "<string>"
      ]
    },
    "ios": {
      "team_id": "",
      "app_bundle_identifier": ""
    }
  },
  "initiate_login_uri": "<string>",
  "native_social_login": {
    "apple": {
      "enabled": false
    },
    "facebook": {
      "enabled": false
    },
    "google": {
      "enabled": false
    }
  },
  "fedcm_login": {
    "google": {
      "is_enabled": false
    }
  },
  "refresh_token": {
    "rotation_type": "non-rotating",
    "expiration_type": "non-expiring",
    "leeway": 0,
    "token_lifetime": 78894000,
    "infinite_token_lifetime": true,
    "idle_token_lifetime": 2,
    "infinite_idle_token_lifetime": false,
    "policies": [
      {
        "audience": "<string>",
        "scope": [
          "<string>"
        ]
      }
    ]
  },
  "default_organization": {
    "organization_id": "<string>",
    "flows": [
      "client_credentials"
    ]
  },
  "organization_usage": "deny",
  "organization_require_behavior": "no_prompt",
  "organization_discovery_methods": [
    "email"
  ],
  "client_authentication_methods": {
    "private_key_jwt": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    },
    "tls_client_auth": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    },
    "self_signed_tls_client_auth": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    }
  },
  "require_pushed_authorization_requests": false,
  "require_proof_of_possession": false,
  "signed_request_object": {
    "required": false,
    "credentials": [
      {
        "id": "<string>"
      }
    ]
  },
  "token_vault_privileged_access": {
    "credentials": [
      {
        "id": "<string>"
      }
    ],
    "ip_allowlist": [
      "127.0.0.1"
    ],
    "grants": [
      {
        "connection": "<string>",
        "scopes": [
          "<string>"
        ]
      }
    ]
  },
  "compliance_level": "none",
  "skip_non_verifiable_callback_uri_confirmation_prompt": true,
  "token_exchange": {
    "allow_any_profile_of_type": [
      "custom_authentication"
    ]
  },
  "par_request_expiry": 305,
  "token_quota": {
    "client_credentials": {
      "enforce": true,
      "per_day": 1073741824,
      "per_hour": 1073741824
    }
  },
  "express_configuration": {
    "initiate_login_uri_template": "<string>",
    "user_attribute_profile_id": "<string>",
    "connection_profile_id": "<string>",
    "enable_client": true,
    "enable_organization": true,
    "okta_oin_client_id": "<string>",
    "admin_login_domain": "<string>",
    "linked_clients": [
      {
        "client_id": "<string>"
      }
    ],
    "oin_submission_id": "<string>"
  },
  "b2b_integration_configuration": {
    "sso_profiles": [
      "<string>"
    ],
    "integration_type": "custom_auth_server"
  },
  "my_organization_configuration": {
    "allowed_strategies": [
      "pingfederate"
    ],
    "connection_deletion_behavior": "allow",
    "connection_profile_id": "<string>",
    "user_attribute_profile_id": "<string>",
    "third_party_client_access": {
      "default_value": "block",
      "allowed_values": [
        "allow"
      ]
    },
    "invitation_landing_client_id": "<string>",
    "enforce_permission_ceiling": false,
    "enforce_self_assignment_restriction": false
  },
  "identity_assertion_authorization_grant": {
    "active": false
  },
  "anonymous_sessions": {
    "active": false
  },
  "enforce_anon_session_transfer_network_binding": "ip",
  "third_party_security_mode": "strict",
  "redirection_policy": "allow_always",
  "resource_server_identifier": "<string>",
  "async_approval_notification_channels": [
    "guardian-push"
  ],
  "external_metadata_type": "cimd",
  "external_metadata_created_by": "admin",
  "external_client_id": "<string>",
  "jwks_uri": "<string>"
}

Mettre à jour un client

Met à jour les paramètres d’un client. Pour en savoir plus, consultez Applications in Auth0 et Single Sign-On.

Remarques :

Les attributs client_secret et signing_key ne peuvent être mis à jour qu’avec la portée update:client_keys.
Les propriétés client_authentication_methods et token_endpoint_auth_method s’excluent mutuellement. Utilisez client_authentication_methods pour configurer le client avec la méthode d’authentification Private Key JWT. Sinon, utilisez token_endpoint_auth_method pour configurer le client avec un client secret (basic ou post) ou sans méthode d’authentification (none).
Lorsque vous utilisez client_authentication_methods pour configurer le client avec la méthode d’authentification Private Key JWT, indiquez uniquement les ID d’identifiants d’authentification générés lors de la création des identifiants d’authentification sur le client.
Pour configurer client_authentication_methods, la portée update:client_credentials est requise.
Pour configurer client_authentication_methods, la propriété jwt_configuration.alg doit être définie à RS256.
Pour remplacer la propriété is_first_party d’un client par false, les propriétés organization_usage et organization_require_behavior doivent être désactivées.

PATCH

https://{tenantDomain}/api/v2

clients

{id}

using Auth0.ManagementApi;
using System.Threading.Tasks;

public partial class Examples
{
    public async Task Example() {
        var client = new ManagementApiClient(
            token: "<token>",
            clientOptions: new ClientOptions { BaseUrl = "https://{YOUR_DOMAIN}/api/v2" }
        );

        await client.Clients.UpdateAsync(
            id: "id",
            request: new UpdateClientRequestContent()
        );
    }

}

package example

import (
    context "context"

    management "github.com/auth0/go-auth0/v3/management"
    client "github.com/auth0/go-auth0/v3/management/client"
    option "github.com/auth0/go-auth0/v3/management/option"
)

func do() {
    mgmt, err := client.New(
        "{YOUR_DOMAIN}",
        option.WithToken(
            "<token>",
        ),
    )
    if err != nil {
        return
    }
    request := &management.UpdateClientRequestContent{}
    mgmt.Clients.Update(
        context.TODO(),
        "id",
        request,
    )
}

package com.example.usage;

import com.auth0.client.mgmt.ManagementApi;
import com.auth0.client.mgmt.types.UpdateClientRequestContent;

public class Example {
    public static void main(String[] args) {
        ManagementApi client = ManagementApi
            .builder()
            .domain("{YOUR_DOMAIN}")
            .token("<token>")
            .build();

        client.clients().update(
            "id",
            UpdateClientRequestContent
                .builder()
                .build()
        );
    }
}

<?php

namespace Example;

use Auth0\SDK\API\Management\Wrapper\ManagementClient;
use Auth0\SDK\API\Management\Wrapper\ManagementClientOptions;
use Auth0\SDK\API\Management\Clients\Requests\UpdateClientRequestContent;

$client = new ManagementClient(new ManagementClientOptions(
    domain: '{YOUR_DOMAIN}',
    token: '<token>',
));
$client->clients->update(
    'id',
    new UpdateClientRequestContent([]),
);

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.clients.update("id", {});
}
main();

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.clients.update("id", {});
}
main();

curl --request PATCH \
  --url https://{tenantDomain}/api/v2/clients/{id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "description": "<string>",
  "client_secret": "<string>",
  "logo_uri": "<string>",
  "callbacks": [
    "<string>"
  ],
  "oidc_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "selected_initiators": []
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "oidc_backchannel_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "selected_initiators": []
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "session_transfer": {
    "can_create_session_transfer_token": false,
    "enforce_cascade_revocation": true,
    "allowed_authentication_methods": [],
    "enforce_device_binding": "ip",
    "allow_refresh_token": false,
    "enforce_online_refresh_tokens": true,
    "delegation": {
      "allow_delegated_access": false,
      "enforce_device_binding": "ip"
    }
  },
  "allowed_origins": [
    "<string>"
  ],
  "web_origins": [
    "<string>"
  ],
  "grant_types": [
    "<string>"
  ],
  "client_aliases": [
    "<string>"
  ],
  "allowed_clients": [
    "<string>"
  ],
  "allowed_logout_urls": [
    "<string>"
  ],
  "jwt_configuration": {
    "lifetime_in_seconds": 36000,
    "secret_encoded": true,
    "scopes": {},
    "alg": "HS256"
  },
  "encryption_key": {
    "pub": "<string>",
    "cert": "<string>",
    "subject": "<string>"
  },
  "sso": true,
  "cross_origin_authentication": true,
  "cross_origin_loc": "<string>",
  "sso_disabled": true,
  "custom_login_page_on": true,
  "token_endpoint_auth_method": "none",
  "is_token_endpoint_ip_header_trusted": false,
  "is_first_party": true,
  "oidc_conformant": false,
  "custom_login_page": "<string>",
  "custom_login_page_preview": "<string>",
  "token_quota": {
    "client_credentials": {
      "enforce": true,
      "per_day": 1073741824,
      "per_hour": 1073741824
    }
  },
  "identity_assertion_authorization_grant": {
    "active": false
  },
  "anonymous_sessions": {
    "active": false
  },
  "enforce_anon_session_transfer_network_binding": "ip",
  "form_template": "<string>",
  "addons": {
    "aws": {
      "principal": "<string>",
      "role": "<string>",
      "lifetime_in_seconds": 22050
    },
    "azure_blob": {
      "accountName": "<string>",
      "storageAccessKey": "<string>",
      "containerName": "<string>",
      "blobName": "<string>",
      "expiration": 1,
      "signedIdentifier": "<string>",
      "blob_read": true,
      "blob_write": true,
      "blob_delete": true,
      "container_read": true,
      "container_write": true,
      "container_delete": true,
      "container_list": true
    },
    "azure_sb": {
      "namespace": "<string>",
      "sasKeyName": "<string>",
      "sasKey": "<string>",
      "entityPath": "<string>",
      "expiration": 123
    },
    "sentry": {
      "org_slug": "<string>",
      "base_url": "<string>"
    },
    "box": {},
    "cloudbees": {},
    "concur": {},
    "dropbox": {},
    "echosign": {
      "domain": "<string>"
    },
    "egnyte": {
      "domain": "<string>"
    },
    "firebase": {
      "secret": "<string>",
      "private_key_id": "<string>",
      "private_key": "<string>",
      "client_email": "<string>",
      "lifetime_in_seconds": 123
    },
    "newrelic": {
      "account": "<string>"
    },
    "office365": {
      "domain": "<string>",
      "connection": "<string>"
    },
    "salesforce": {
      "entity_id": "<string>"
    },
    "salesforce_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "salesforce_sandbox_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "samlp": {
      "mappings": {},
      "audience": "<string>",
      "recipient": "<string>",
      "createUpnClaim": true,
      "mapUnknownClaimsAsIs": true,
      "passthroughClaimsWithNoMapping": true,
      "mapIdentities": true,
      "signatureAlgorithm": "<string>",
      "digestAlgorithm": "<string>",
      "issuer": "<string>",
      "destination": "<string>",
      "lifetimeInSeconds": 123,
      "signResponse": true,
      "nameIdentifierFormat": "<string>",
      "nameIdentifierProbes": [
        "<string>"
      ],
      "authnContextClassRef": "<string>"
    },
    "sap_api": {
      "clientid": "<string>",
      "usernameAttribute": "<string>",
      "tokenEndpointUrl": "<string>",
      "scope": "<string>",
      "servicePassword": "<string>",
      "nameIdentifierFormat": "<string>"
    },
    "sharepoint": {
      "url": "<string>",
      "external_url": [
        "<string>"
      ]
    },
    "springcm": {
      "acsurl": "<string>"
    },
    "wams": {
      "masterkey": "<string>"
    },
    "wsfed": {},
    "zendesk": {
      "accountName": "<string>"
    },
    "zoom": {
      "account": "<string>"
    },
    "sso_integration": {
      "name": "<string>",
      "version": "<string>"
    },
    "oag": {}
  },
  "client_metadata": {},
  "mobile": {
    "android": {
      "app_package_name": "",
      "sha256_cert_fingerprints": [
        "<string>"
      ]
    },
    "ios": {
      "team_id": "",
      "app_bundle_identifier": ""
    }
  },
  "initiate_login_uri": "<string>",
  "native_social_login": {
    "apple": {
      "enabled": false
    },
    "facebook": {
      "enabled": false
    },
    "google": {
      "enabled": false
    }
  },
  "fedcm_login": {
    "google": {
      "is_enabled": false
    }
  },
  "refresh_token": {
    "rotation_type": "non-rotating",
    "expiration_type": "non-expiring",
    "leeway": 0,
    "token_lifetime": 78894000,
    "infinite_token_lifetime": true,
    "idle_token_lifetime": 2,
    "infinite_idle_token_lifetime": false,
    "policies": [
      {
        "audience": "<string>",
        "scope": [
          "<string>"
        ]
      }
    ]
  },
  "default_organization": {
    "organization_id": "<string>",
    "flows": [
      "client_credentials"
    ]
  },
  "organization_usage": "deny",
  "organization_require_behavior": "no_prompt",
  "organization_discovery_methods": [],
  "client_authentication_methods": {},
  "require_pushed_authorization_requests": false,
  "require_proof_of_possession": false,
  "signed_request_object": {
    "required": false,
    "credentials": [
      {
        "id": "<string>"
      }
    ]
  },
  "skip_non_verifiable_callback_uri_confirmation_prompt": true,
  "token_exchange": {
    "allow_any_profile_of_type": []
  },
  "par_request_expiry": 305,
  "express_configuration": {
    "initiate_login_uri_template": "<string>",
    "user_attribute_profile_id": "<string>",
    "connection_profile_id": "<string>",
    "enable_client": true,
    "enable_organization": true,
    "okta_oin_client_id": "<string>",
    "admin_login_domain": "<string>",
    "linked_clients": [
      {
        "client_id": "<string>"
      }
    ],
    "oin_submission_id": "<string>"
  },
  "b2b_integration_configuration": {
    "sso_profiles": [
      "<string>"
    ]
  },
  "my_organization_configuration": {
    "allowed_strategies": [],
    "connection_deletion_behavior": "allow",
    "connection_profile_id": "<string>",
    "user_attribute_profile_id": "<string>",
    "invitation_landing_client_id": "<string>",
    "enforce_permission_ceiling": false,
    "enforce_self_assignment_restriction": false
  },
  "async_approval_notification_channels": [],
  "oidc_support": {
    "is_allowed": true,
    "allow_all_scopes": true,
    "allowed_scopes": []
  }
}
'

{
  "client_id": "AaiyAPdpYdesoKnqjj8HJqRn4T5titww",
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z",
  "tenant": "",
  "name": "My application",
  "description": "",
  "global": false,
  "client_secret": "MG_TNT2ver-SylNat-_VeMmd-4m0Waba0jr1troztBniSChEw0glxEmgEi2Kw40H",
  "app_type": "native",
  "logo_uri": "<string>",
  "is_first_party": false,
  "oidc_conformant": false,
  "callbacks": [
    "<string>"
  ],
  "allowed_origins": [
    "<string>"
  ],
  "web_origins": [
    "<string>"
  ],
  "client_aliases": [
    "<string>"
  ],
  "allowed_clients": [
    "<string>"
  ],
  "allowed_logout_urls": [
    "<string>"
  ],
  "session_transfer": {
    "can_create_session_transfer_token": false,
    "enforce_cascade_revocation": true,
    "allowed_authentication_methods": [
      "cookie"
    ],
    "enforce_device_binding": "ip",
    "allow_refresh_token": false,
    "enforce_online_refresh_tokens": true,
    "delegation": {
      "allow_delegated_access": false,
      "enforce_device_binding": "ip"
    }
  },
  "oidc_logout": {
    "backchannel_logout_urls": [
      "<string>"
    ],
    "backchannel_logout_initiators": {
      "mode": "custom",
      "selected_initiators": [
        "rp-logout"
      ]
    },
    "backchannel_logout_session_metadata": {
      "include": true
    }
  },
  "grant_types": [
    "<string>"
  ],
  "jwt_configuration": {
    "lifetime_in_seconds": 36000,
    "secret_encoded": true,
    "scopes": {},
    "alg": "HS256"
  },
  "signing_keys": [
    {
      "pkcs7": "",
      "cert": "",
      "subject": ""
    }
  ],
  "encryption_key": {
    "pub": "<string>",
    "cert": "<string>",
    "subject": "<string>"
  },
  "sso": false,
  "sso_disabled": false,
  "cross_origin_authentication": true,
  "cross_origin_loc": "<string>",
  "custom_login_page_on": true,
  "custom_login_page": "",
  "custom_login_page_preview": "",
  "form_template": "",
  "addons": {
    "aws": {
      "principal": "<string>",
      "role": "<string>",
      "lifetime_in_seconds": 22050
    },
    "azure_blob": {
      "accountName": "<string>",
      "storageAccessKey": "<string>",
      "containerName": "<string>",
      "blobName": "<string>",
      "expiration": 1,
      "signedIdentifier": "<string>",
      "blob_read": true,
      "blob_write": true,
      "blob_delete": true,
      "container_read": true,
      "container_write": true,
      "container_delete": true,
      "container_list": true
    },
    "azure_sb": {
      "namespace": "<string>",
      "sasKeyName": "<string>",
      "sasKey": "<string>",
      "entityPath": "<string>",
      "expiration": 123
    },
    "rms": {
      "url": "<string>"
    },
    "mscrm": {
      "url": "<string>"
    },
    "slack": {
      "team": "<string>"
    },
    "sentry": {
      "org_slug": "<string>",
      "base_url": "<string>"
    },
    "box": {},
    "cloudbees": {},
    "concur": {},
    "dropbox": {},
    "echosign": {
      "domain": "<string>"
    },
    "egnyte": {
      "domain": "<string>"
    },
    "firebase": {
      "secret": "<string>",
      "private_key_id": "<string>",
      "private_key": "<string>",
      "client_email": "<string>",
      "lifetime_in_seconds": 123
    },
    "newrelic": {
      "account": "<string>"
    },
    "office365": {
      "domain": "<string>",
      "connection": "<string>"
    },
    "salesforce": {
      "entity_id": "<string>"
    },
    "salesforce_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "salesforce_sandbox_api": {
      "clientid": "<string>",
      "principal": "<string>",
      "communityName": "<string>",
      "community_url_section": "<string>"
    },
    "samlp": {
      "mappings": {},
      "audience": "<string>",
      "recipient": "<string>",
      "createUpnClaim": true,
      "mapUnknownClaimsAsIs": true,
      "passthroughClaimsWithNoMapping": true,
      "mapIdentities": true,
      "signatureAlgorithm": "<string>",
      "digestAlgorithm": "<string>",
      "issuer": "<string>",
      "destination": "<string>",
      "lifetimeInSeconds": 123,
      "signResponse": true,
      "nameIdentifierFormat": "<string>",
      "nameIdentifierProbes": [
        "<string>"
      ],
      "authnContextClassRef": "<string>"
    },
    "layer": {
      "providerId": "<string>",
      "keyId": "<string>",
      "privateKey": "<string>",
      "principal": "<string>",
      "expiration": 1
    },
    "sap_api": {
      "clientid": "<string>",
      "usernameAttribute": "<string>",
      "tokenEndpointUrl": "<string>",
      "scope": "<string>",
      "servicePassword": "<string>",
      "nameIdentifierFormat": "<string>"
    },
    "sharepoint": {
      "url": "<string>",
      "external_url": [
        "<string>"
      ]
    },
    "springcm": {
      "acsurl": "<string>"
    },
    "wams": {
      "masterkey": "<string>"
    },
    "wsfed": {},
    "zendesk": {
      "accountName": "<string>"
    },
    "zoom": {
      "account": "<string>"
    },
    "sso_integration": {
      "name": "<string>",
      "version": "<string>"
    },
    "oag": {}
  },
  "token_endpoint_auth_method": "none",
  "is_token_endpoint_ip_header_trusted": false,
  "client_metadata": {},
  "mobile": {
    "android": {
      "app_package_name": "",
      "sha256_cert_fingerprints": [
        "<string>"
      ]
    },
    "ios": {
      "team_id": "",
      "app_bundle_identifier": ""
    }
  },
  "initiate_login_uri": "<string>",
  "native_social_login": {
    "apple": {
      "enabled": false
    },
    "facebook": {
      "enabled": false
    },
    "google": {
      "enabled": false
    }
  },
  "fedcm_login": {
    "google": {
      "is_enabled": false
    }
  },
  "refresh_token": {
    "rotation_type": "non-rotating",
    "expiration_type": "non-expiring",
    "leeway": 0,
    "token_lifetime": 78894000,
    "infinite_token_lifetime": true,
    "idle_token_lifetime": 2,
    "infinite_idle_token_lifetime": false,
    "policies": [
      {
        "audience": "<string>",
        "scope": [
          "<string>"
        ]
      }
    ]
  },
  "default_organization": {
    "organization_id": "<string>",
    "flows": [
      "client_credentials"
    ]
  },
  "organization_usage": "deny",
  "organization_require_behavior": "no_prompt",
  "organization_discovery_methods": [
    "email"
  ],
  "client_authentication_methods": {
    "private_key_jwt": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    },
    "tls_client_auth": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    },
    "self_signed_tls_client_auth": {
      "credentials": [
        {
          "id": "<string>"
        }
      ]
    }
  },
  "require_pushed_authorization_requests": false,
  "require_proof_of_possession": false,
  "signed_request_object": {
    "required": false,
    "credentials": [
      {
        "id": "<string>"
      }
    ]
  },
  "token_vault_privileged_access": {
    "credentials": [
      {
        "id": "<string>"
      }
    ],
    "ip_allowlist": [
      "127.0.0.1"
    ],
    "grants": [
      {
        "connection": "<string>",
        "scopes": [
          "<string>"
        ]
      }
    ]
  },
  "compliance_level": "none",
  "skip_non_verifiable_callback_uri_confirmation_prompt": true,
  "token_exchange": {
    "allow_any_profile_of_type": [
      "custom_authentication"
    ]
  },
  "par_request_expiry": 305,
  "token_quota": {
    "client_credentials": {
      "enforce": true,
      "per_day": 1073741824,
      "per_hour": 1073741824
    }
  },
  "express_configuration": {
    "initiate_login_uri_template": "<string>",
    "user_attribute_profile_id": "<string>",
    "connection_profile_id": "<string>",
    "enable_client": true,
    "enable_organization": true,
    "okta_oin_client_id": "<string>",
    "admin_login_domain": "<string>",
    "linked_clients": [
      {
        "client_id": "<string>"
      }
    ],
    "oin_submission_id": "<string>"
  },
  "b2b_integration_configuration": {
    "sso_profiles": [
      "<string>"
    ],
    "integration_type": "custom_auth_server"
  },
  "my_organization_configuration": {
    "allowed_strategies": [
      "pingfederate"
    ],
    "connection_deletion_behavior": "allow",
    "connection_profile_id": "<string>",
    "user_attribute_profile_id": "<string>",
    "third_party_client_access": {
      "default_value": "block",
      "allowed_values": [
        "allow"
      ]
    },
    "invitation_landing_client_id": "<string>",
    "enforce_permission_ceiling": false,
    "enforce_self_assignment_restriction": false
  },
  "identity_assertion_authorization_grant": {
    "active": false
  },
  "anonymous_sessions": {
    "active": false
  },
  "enforce_anon_session_transfer_network_binding": "ip",
  "third_party_security_mode": "strict",
  "redirection_policy": "allow_always",
  "resource_server_identifier": "<string>",
  "async_approval_notification_channels": [
    "guardian-push"
  ],
  "external_metadata_type": "cimd",
  "external_metadata_created_by": "admin",
  "external_client_id": "<string>",
  "jwks_uri": "<string>"
}

Autorisations

Authorization

string

header

requis

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Paramètres de chemin

string

requis

ID du client à mettre à jour.

Corps

name

string

Le nom du client. Doit contenir au moins un caractère. N’autorise pas '<' ni '>'.

Pattern: ^[^<>]+$

description

string

Description libre de l’objectif du client. (Longueur maximale : 140 caractères)

Maximum string length: 140

client_secret

string

Le secret utilisé pour signer les jetons du client

Minimum string length: 1

logo_uri

string<absolute-uri-or-empty>

L’URL du logo du client (taille recommandée : 150x150)

callbacks

string<callback-url>[]

Ensemble d’URL valides pour le rappel depuis Auth0 lors de l’authentification des utilisateurs

oidc_logout

object

Configuration du logout OIDC par canal arrière

Show child attributes

oidc_backchannel_logout

object

deprecated

Configuration du logout backchannel OIDC (deprecated, au profit de oidc_logout)

Show child attributes

session_transfer

object | null

Configuration de Native to Web SSO

Show child attributes

allowed_origins

string<url-with-placeholders>[]

Ensemble d’URL représentant des origines valides pour CORS

web_origins

string<url-with-placeholders>[]

Ensemble d’URL représentant des origines Web valides à utiliser avec le mode de réponse web message

grant_types

string[]

Ensemble des grant types que le client est autorisé à utiliser. Peut inclure authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, urn:openid:params:grant-type:ciba, urn:ietf:params:oauth:grant-type:device_code et urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token.

Minimum string length: 1

client_aliases

string[]

Liste des audiences pour le protocole SAML

Minimum string length: 1

allowed_clients

string[]

ID des clients qui seront autorisés à effectuer des requêtes de Delegation. Clients qui seront autorisés à effectuer une requête de Delegation. Par défaut, tous vos clients seront autorisés. Ce champ vous permet de préciser des clients particuliers

Minimum string length: 1

allowed_logout_urls

string<url-with-placeholders>[]

URL valides de redirection après le logout d’Auth0

jwt_configuration

object

Objet qui contient les paramètres liés à la façon dont les JWT sont créés

Show child attributes

encryption_key

object | null

La clé de chiffrement du client

Show child attributes

sso

boolean

true pour utiliser Auth0 au lieu du fournisseur d’identité afin d’effectuer l’authentification unique, false sinon (par défaut : false)

cross_origin_authentication

boolean

true si ce client peut être utilisé pour effectuer des requêtes de cross-origin authentication, false sinon, si le cross-origin est désactivé

cross_origin_loc

string<url-or-null> | null

URL de l’emplacement sur votre site où la vérification inter-origine a lieu pour le flux de cross-origin authentication lorsque l’authentification est effectuée sur votre propre domain plutôt que sur la hosted login page d’Auth0.

sso_disabled

boolean

true pour désactiver l’authentification unique, false sinon (par défaut : false)

true si la custom login page doit être utilisée, false sinon.

token_endpoint_auth_method

enum<string> | null

défaut:none

Définit la méthode d’authentification demandée pour le point de terminaison des jetons. Peut être none (client public sans client secret), client_secret_post (le client utilise des paramètres HTTP POST) ou client_secret_basic (le client utilise HTTP Basic).

Options disponibles:

none,

client_secret_post,

client_secret_basic,

null

is_token_endpoint_ip_header_trusted

boolean

défaut:false

Si true, considérer que l’IP indiquée dans le header auth0-forwarded-for est l’IP de l’end-user pour la protection contre les attaques par force brute sur le token endpoint.

app_type

enum<string>

Le type d’application que ce client représente

Options disponibles:

native,

spa,

regular_web,

non_interactive,

resource_server,

express_configuration,

rms,

box,

cloudbees,

concur,

dropbox,

mscrm,

echosign,

egnyte,

newrelic,

office365,

salesforce,

sentry,

sharepoint,

slack,

springcm,

zendesk,

zoom,

sso_integration,

oag

is_first_party

boolean

défaut:true

Indique si ce client est un client propriétaire ou non

oidc_conformant

boolean

défaut:false

Indique si ce client sera conforme aux spécifications strictes d’OIDC

Le contenu (HTML, CSS, JS) de la page de connexion personnalisée

token_quota

object | null

Show child attributes

identity_assertion_authorization_grant

object | null

Configuration de l’utilisation des ID-JAG pour l’accès interapplications.

Show child attributes

anonymous_sessions

object | null

Configuration des sessions anonymes pour ce client.

Show child attributes

enforce_anon_session_transfer_network_binding

enum<string>

défaut:ip

Indique si la liaison réseau doit être appliquée lors de l’utilisation d’un jeton de transfert de session anonyme. Si la valeur est 'ip', le jeton doit être utilisé à partir de la même adresse IP que celle de l’émetteur. Si la valeur est 'asn', le jeton doit être utilisé à partir du même NSA que celui de l’émetteur. Si la valeur est 'none', la liaison n’est pas appliquée. La valeur par défaut est ip.

Options disponibles:

ip,

asn,

none

form_template

string

Modèle de formulaire pour le protocole WS-Federation

addons

object

Modules complémentaires activés pour ce client et leur configuration associée.

Show child attributes

client_metadata

object

Metadata associées au client, sous la forme d’un object contenant des valeurs String (max. 255 caractères). Un maximum de 10 properties de metadata est autorisé. Les field names (max. 255 caractères) sont alphanumériques et peuvent uniquement inclure les caractères spéciaux suivants : :,-+=_*?"/()<>@ [Tab] [Space]

mobile

object

Configuration liée aux applications mobiles natives

Show child attributes

URI de connexion initiale; doit utiliser HTTPS

Configurer les paramètres de connexion sociale native

Show child attributes

Configurer les paramètres de connexion FedCM pour le nouveau Universal Login

Show child attributes

refresh_token

object | null

Configuration du Refresh Token

Show child attributes

default_organization

object | null

Définit l’ID d’Organization par défaut et les flows.

Show child attributes

organization_usage

enum<string> | null

défaut:deny

Définit comment procéder pendant une transaction d’authentification en ce qui concerne une organization. Peut être deny (par défaut), allow ou require.

Options disponibles:

deny,

allow,

require,

null

organization_require_behavior

enum<string> | null

défaut:no_prompt

Définit comment procéder pendant une transaction d’authentification lorsque client.organization_usage: 'require'. Peut être no_prompt (par défaut), pre_login_prompt ou post_login_prompt. post_login_prompt exige oidc_conformant: true.

Options disponibles:

no_prompt,

pre_login_prompt,

post_login_prompt,

null

organization_discovery_methods

enum<string>[] | null

Définit les méthodes disponibles pour la découverte de l’organisation pendant le pre_login_prompt. Les utilisateurs peuvent découvrir leur organisation par email, organization_name ou les deux.

Minimum array length: 1

Méthode de découverte des organisations pendant pre_login_prompt. email permet aux utilisateurs de trouver leur organisation en saisissant leur adresse courriel et en effectuant une correspondance de domaine, tandis que organization_name exige qu’ils saisissent directement le nom de l’organisation. Ces méthodes peuvent être combinées.

Options disponibles:

email,

organization_name

client_authentication_methods

object | null

Définit les méthodes d’authentification du client.

Show child attributes

require_pushed_authorization_requests

boolean

défaut:false

Rend l’utilisation des Pushed Authorization Requests obligatoire pour ce client

require_proof_of_possession

boolean

défaut:false

Rend l’utilisation de la Proof-of-Possession obligatoire pour ce client

signed_request_object

object

Paramètres de JWT-Secured Authorization Requests (JAR).

Show child attributes

token_vault_privileged_access

object

Paramètres de l’accès privilégié à Token Vault.

Show child attributes

compliance_level

enum<string> | null

Définit le niveau de conformité pour ce client, ce qui peut restreindre ses capacités.

Options disponibles:

none,

fapi1_adv_pkj_par,

fapi1_adv_mtls_par,

fapi2_sp_pkj_mtls,

fapi2_sp_mtls_mtls,

null

skip_non_verifiable_callback_uri_confirmation_prompt

boolean | null

Détermine si une invite de confirmation s’affiche pendant les login flows lorsque l’URI de redirection utilise des callback URI non vérifiables (par exemple, un schéma d’URI personnalisé comme myapp:// ou localhost). Si la valeur est true, aucune invite de confirmation ne s’affichera. Nous recommandons de définir cette option à false pour mieux vous protéger contre les applications malveillantes. Consultez https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation pour en savoir plus.

token_exchange

object | null

Configuration de l’échange de jetons.

Show child attributes

par_request_expiry

integer | null

Précise pendant combien de temps, en secondes, une URI de Pushed Authorization Request demeure valide

Plage requise: 10 <= x <= 600

express_configuration

object | null

Configuration propre à l’application à utiliser avec la fonctionnalité OIN Express Configuration.

Show child attributes

b2b_integration_configuration

object

Configuration des clients d’intégration B2B.

Show child attributes

my_organization_configuration

object | null

Configuration liée à My Organization Configuration pour le client.

Show child attributes

async_approval_notification_channels

enum<string>[] | null

Tableau des canaux de notification pour communiquer avec l’utilisateur lorsque son approbation est requise. Les valeurs valides sont guardian-push, email, my-account.

Minimum array length: 1

Options disponibles:

guardian-push,

email,

my-account

third_party_security_mode

enum<string>

Mode de sécurité pour les clients tiers. strict applique des contrôles de sécurité renforcés : alignement sur OAuth 2.1, autorisation explicite de l’API et ensemble sélectionné de fonctionnalités prises en charge. permissive conserve le comportement préexistant et n’est offert qu’aux tenants ayant déjà utilisé des clients tiers. Il est défini à la création et ne peut pas être modifié.

Options disponibles:

strict,

permissive

redirection_policy

enum<string>

Détermine si Auth0 redirige les utilisateurs vers l’URL de rappel de l’application en cas d’erreur d’authentification ou dans les flux de vérification du courriel. open_redirect_protection affiche plutôt une page d’erreur que d’effectuer une redirection et masque le domaine de rappel dans les modèles de courriel. allow_always active le comportement de redirection standard. La valeur par défaut est open_redirect_protection pour les clients third-party. S’applique uniquement lorsque is_first_party est false et que third_party_security_mode est strict. Pour en savoir plus, consultez la protection contre les redirections.

Options disponibles:

allow_always,

open_redirect_protection

oidc_support

object | null

Configuration de la prise en charge d’OIDC pour un client. Remplace entièrement l’objet stocké; envoyez null pour le supprimer.

Show child attributes

Réponse

Client mis à jour avec succès.

client_id

string

défaut:AaiyAPdpYdesoKnqjj8HJqRn4T5titww

ID de ce client.

created_at

string<date-time>

L’horodatage ISO 8601 de la création de ce client.

updated_at

string<date-time>

L’horodatage ISO 8601 de la dernière mise à jour de ce client.

tenant

string

défaut:""

Nom du tenant auquel ce client appartient.

name

string

défaut:My application

Nom de ce client (longueur minimale : 1 caractère; < et > ne sont pas permis).

description

string

défaut:""

Description en texte libre de ce client (longueur maximale : 140 caractères).

global

boolean

défaut:false

Indique s’il s’agit de votre client global « All Applications », qui représente les anciens paramètres du tenant (true), ou d’un client ordinaire (false).

client_secret

string

défaut:MG_TNT2ver-SylNat-_VeMmd-4m0Waba0jr1troztBniSChEw0glxEmgEi2Kw40H

Client secret (que vous ne devez pas rendre public).

app_type

enum<string>

Le type d’application que ce client représente

Options disponibles:

native,

spa,

regular_web,

non_interactive,

resource_server,

express_configuration,

rms,

box,

cloudbees,

concur,

dropbox,

mscrm,

echosign,

egnyte,

newrelic,

office365,

salesforce,

sentry,

sharepoint,

slack,

springcm,

zendesk,

zoom,

sso_integration,

oag

logo_uri

string

URL du logo à afficher pour ce client. La taille recommandée est de 150 x 150 pixels.

is_first_party

boolean

défaut:false

Indique si ce client est un client de première partie (true) ou non (false).

oidc_conformant

boolean

défaut:false

Indique si ce client est conforme aux spécifications OIDC strictes (true) ou s’il utilise des fonctionnalités Legacy (false).

callbacks

string[]

Liste d’URL séparées par des virgules qu’Auth0 est autorisé à utiliser comme callback vers le client après l’authentification.

allowed_origins

string[]

Liste d’URL séparées par des virgules autorisées à envoyer des requêtes JavaScript vers l’API Auth0 (habituellement utilisée avec CORS). Par défaut, toutes vos callback URLs seront autorisées. Ce champ vous permet de saisir d’autres origines au besoin. Vous pouvez aussi utiliser des wildcards au niveau des sous-domaines (par ex. : https://*.contoso.com). Les query strings et les informations de hachage ne sont pas prises en compte lors de la validation de ces URL.

web_origins

string[]

Liste d’origines autorisées, séparées par des virgules, à utiliser avec la Cross-Origin Authentication, le Device Flow et le mode de réponse web message.

client_aliases

string[]

Liste des audiences/realms pour le protocole SAML. Utilisée par le module complémentaire wsfed.

allowed_clients

string[]

Liste des clients autorisés et des ID d’API autorisés à effectuer des requêtes de délégation. Vide signifie que tous vos clients sont autorisés.

allowed_logout_urls

string[]

Liste d’URL séparées par des virgules vers lesquelles la redirection après la déconnexion d’Auth0 est autorisée. Les wildcards sont autorisés pour les sous-domaines.

session_transfer

object | null

Configuration de Native to Web SSO

Show child attributes

oidc_logout

object

Configuration du logout OIDC par canal arrière

Show child attributes

grant_types

string[]

Liste des grant types pris en charge pour cette application. Peut inclure authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, urn:openid:params:grant-type:ciba, urn:ietf:params:oauth:grant-type:device_code et urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token.

jwt_configuration

object

Configuration liée aux JWT du client.

Show child attributes

signing_keys

object[] | null

Certificats de signature associés à ce client.

Show child attributes

encryption_key

object | null

Chiffrement utilisé pour les réponses WsFed avec ce client.

Show child attributes

sso

boolean

défaut:false

S’applique uniquement aux clients SSO et détermine si Auth0 gérera l’authentification unique (true) ou si ce sera l’Identity Provider (false).

sso_disabled

boolean

défaut:false

Indique si l’authentification unique est désactivée (true) ou activée (true). La valeur par défaut est true.

cross_origin_authentication

boolean

Indique si ce client peut être utilisé pour effectuer des requêtes d’authentification cross-origin (true) ou s’il n’est pas autorisé à en effectuer (false).

cross_origin_loc

string<url>

URL de l’emplacement sur votre site où s’effectue la vérification cross-origin pour le flux d’authentification cross-origin lorsque l’authentification est effectuée sur votre propre domaine plutôt que sur la hosted login page d’Auth0.

Indique si une custom login page doit être utilisée (true) ou si la login page fournie par défaut doit l’être (false).

Le contenu (HTML, CSS, JS) de la custom login page.

Le contenu (HTML, CSS, JS) de la custom login page. (Utilisé pour les aperçus)

form_template

string

défaut:""

Modèle de formulaire HTML à utiliser pour WS-Federation.

addons

object

Modules complémentaires activés pour ce client et leur configuration associée.

Show child attributes

token_endpoint_auth_method

enum<string>

défaut:none

Options disponibles:

none,

client_secret_post,

client_secret_basic

is_token_endpoint_ip_header_trusted

boolean

défaut:false

Si true, considère que l’IP indiquée dans l’en-tête auth0-forwarded-for est l’IP de l’utilisateur final aux fins de la protection contre les attaques par force brute au token endpoint.

client_metadata

object

mobile

object

Configuration supplémentaire pour les applications mobiles natives.

Show child attributes

URI de connexion initiale; doit utiliser HTTPS

Configurer les paramètres de connexion sociale native

Show child attributes

Configurer les paramètres de connexion FedCM pour le nouveau Universal Login

Show child attributes

refresh_token

object | null

Configuration du Refresh Token

Show child attributes

default_organization

object | null

Définit l’ID d’Organization par défaut et les flows.

Show child attributes

organization_usage

enum<string>

défaut:deny

Définit comment procéder pendant une transaction d’authentification en ce qui concerne une organization. Peut être deny (par défaut), allow ou require.

Options disponibles:

deny,

allow,

require

organization_require_behavior

enum<string>

défaut:no_prompt

Options disponibles:

no_prompt,

pre_login_prompt,

post_login_prompt

organization_discovery_methods

enum<string>[]

Définit les méthodes offertes pour la découverte de l’organisation pendant le pre_login_prompt. Les utilisateurs peuvent découvrir leur organisation à l’aide de email, de organization_name ou des deux.

Minimum array length: 1

Options disponibles:

email,

organization_name

client_authentication_methods

object | null

Définit les méthodes d’authentification du client.

Show child attributes

require_pushed_authorization_requests

boolean

défaut:false

Rend l’utilisation de Pushed Authorization Requests obligatoire pour ce client

require_proof_of_possession

boolean

défaut:false

Rend l’utilisation de Proof-of-Possession obligatoire pour ce client

signed_request_object

object

Paramètres de JWT-Secured Authorization Requests (JAR).

Show child attributes

token_vault_privileged_access

object

Paramètres de l’accès privilégié à Token Vault.

Show child attributes

compliance_level

enum<string> | null

Définit le niveau de conformité pour ce client, ce qui peut restreindre ses capacités.

Options disponibles:

none,

fapi1_adv_pkj_par,

fapi1_adv_mtls_par,

fapi2_sp_pkj_mtls,

fapi2_sp_mtls_mtls,

null

skip_non_verifiable_callback_uri_confirmation_prompt

boolean

Détermine si une invite de confirmation s’affiche pendant les login flows lorsque l’URI de redirection utilise des callback URI non vérifiables (par exemple, un schéma d’URI personnalisé comme myapp:// ou localhost). Si la valeur est true, aucune invite de confirmation ne s’affichera. Nous recommandons de régler cette valeur à false pour mieux se protéger contre les applications malveillantes. Consultez https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation pour plus d’information.

token_exchange

object

Configuration de l’échange de jetons.

Show child attributes

par_request_expiry

integer | null

Précise pendant combien de temps, en secondes, un URI de Pushed Authorization Request reste valide

Plage requise: 10 <= x <= 600

token_quota

object

Show child attributes

express_configuration

object

Configuration propre à l’application à utiliser avec la fonctionnalité OIN Express Configuration.

Show child attributes

b2b_integration_configuration

object

Configuration des clients d’intégration B2B.

Show child attributes

my_organization_configuration

object

Configuration liée à la configuration My Organization pour le client.

Show child attributes

identity_assertion_authorization_grant

object

Configuration relative à l’utilisation des ID-JAG pour Cross App Access.

Show child attributes

anonymous_sessions

object

Configuration des sessions anonymes pour ce client.

Show child attributes

enforce_anon_session_transfer_network_binding

enum<string>

défaut:ip

Options disponibles:

ip,

asn,

none

third_party_security_mode

enum<string>

Options disponibles:

strict,

permissive

redirection_policy

enum<string>

Options disponibles:

allow_always,

open_redirect_protection

resource_server_identifier

string

L’identifiant du resource server auquel ce client est associé.

async_approval_notification_channels

enum<string>[]

Tableau des canaux de notification pour communiquer avec l’utilisateur lorsque son approbation est requise. Les valeurs valides sont guardian-push, email, my-account.

Minimum array length: 1

Options disponibles:

guardian-push,

email,

my-account

external_metadata_type

enum<string>

Indique le type de métadonnées externes utilisé pour enregistrer le client. Ce champ est omis pour les clients ordinaires. La valeur cimd identifie les clients enregistrés au moyen d’un Client ID Metadata Document. La valeur dcr identifie les clients enregistrés au moyen de Dynamic Client Registration.

Options disponibles:

cimd,

dcr

external_metadata_created_by

enum<string>

Indique qui a créé le client de métadonnées externes. La valeur admin indique que le client a été enregistré au moyen de la Management API. La valeur client indique que le client a été enregistré dynamiquement. Ce champ n’est présent que lorsque external_metadata_type est défini.

Options disponibles:

admin,

client

external_client_id

string<absolute-https-uri-or-empty>

Un autre identifiant de client à utiliser pendant les authorization flows. Prend uniquement en charge les identifiants de client basés sur CIMD.

jwks_uri

string<absolute-https-uri-or-empty>

URL du JSON Web Key Set (JWKS) contenant les clés publiques utilisées pour l’authentication private_key_jwt. Présente uniquement pour les clients CIMD qui utilisent l’authentication private_key_jwt.