OAuth Clients

In the OAuth Clients section, you can manage OAuth client registrations that are used for authentication and authorization with external identity providers (e.g. Keycloak, Azure Entra ID). OAuth clients define the connection details needed for your Flowable environment to authenticate against these providers.

The 'Tenant ID', 'Registration key', and 'Client id' fields can be used to narrow down the list of OAuth clients.

Create OAuth Client

Open the Select an action menu and select Create to register a new OAuth client.

A dialog will appear where you can configure the following properties:

• Registration key - A unique key to identify this registration (e.g. keycloak-prod, azure-entra)
• Client id - The client identifier as registered with the identity provider
• Client secret - The client secret for authentication
• Issuer uri - The issuer URI of the identity provider
• Token uri - The token endpoint URI used to obtain access tokens
• Scopes - The OAuth scopes to request (e.g. openid profile email)

OAuth Client Details

Clicking on an OAuth client in the list opens a detail page showing all configured properties.

Update OAuth Client

On the detail page, click the Update button to modify the OAuth client configuration. A dialog will appear with the current values pre-filled.

Delete OAuth Client

On the detail page, click the Delete button to remove the OAuth client. A confirmation dialog will be shown before the OAuth client is deleted.