Find the Client ID and Application ID for OIDC Applications in Okta

Determining the Application ID and the Client ID for an OpenID Connect (OIDC) application requires checking the Okta Admin Console or leveraging the Okta Apps API. For most OIDC applications, the Application ID matches the Client ID, but this varies depending on how the administrator creates the application.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• OpenID Connect (OIDC) applications

How does an administrator locate the Application ID and Client ID for an OpenID Connect application?

Locate the Application ID and the Client ID for an OpenID Connect application by leveraging the Okta Apps API or by navigating to the application in the Okta Admin Console.

• Leverage the Okta Apps API to display a list of all available applications by making a request to https://<okta-url>/api/v1/apps. The Application ID is the id Okta returns for the application, and the Client ID resides in the OAuth Credential object within the application.

{
    "id": "0oa4o1c6848mCZGhW3l7",
    "orn": "orn:okta:idp:00o4jeobxx9Yks4m03l7:apps:oidc_client:0oa4o1c6848mCZGhW3l7",
    "name": "oidc_client",
    "label": "<Application_Name>",
    "status": "ACTIVE",
    "accessibility": {
        "selfService": false,
        "errorRedirectUrl": null,
        "loginRedirectUrl": null
    },
    "visibility": {
        "autoLaunch": false,
        "autoSubmitToolbar": false,
        "hide": {
            "iOS": true,
            "web": true
        },
        "appLinks": {
            "oidc_client_link": true
        }
    },
    "features": [],
    "signOnMode": "OPENID_CONNECT",
    "credentials": {
        "userNameTemplate": {
            "template": "${source.login}",
            "type": "BUILT_IN"
        },
        "signing": {
            "kid": "<kid>"
        },
        "oauthClient": {
            "autoKeyRotation": true,
            "client_id": "0oa4o1c6848mCZGhW3l7",
            "token_endpoint_auth_method": "client_secret_basic",
            "pkce_required": false
        }
    },
    "universalLogout": {
        "status": "DISABLED",
        "supportType": "FULL",
        "identityStack": "NOT_SHARED",
        "protocol": "GLOBAL_TOKEN_REVOCATION"
    },
    "settings": {
        "app": {},
        "notifications": {
            "vpn": {
                "network": {
                    "connection": "DISABLED"
                },
                "message": null,
                "helpUrl": null
            }
        },
        "manualProvisioning": false,
        "implicitAssignment": false,
        "emOptInStatus": "NONE",
        "notes": {
            "admin": null,
            "enduser": "This is the test to update the client"
        },
        "oauthClient": {
            "client_uri": null,
            "logo_uri": null,
            "redirect_uris": [
                "http://localhost:8080/login/callback"
            ],
            "post_logout_redirect_uris": [
                "http://localhost:8080"
            ],
            "response_types": [
                "id_token",
                "code"
            ],
            "grant_types": [
                "implicit",
                "authorization_code",
                "refresh_token",
                "interaction_code"
            ],
            "application_type": "web",
            "consent_method": "TRUSTED",
            "issuer_mode": "DYNAMIC",
            "refresh_token": {
                "rotation_type": "STATIC"
            },
            "idp_initiated_login": {
                "mode": "DISABLED",
                "default_scope": []
            },
            "wildcard_redirect": "DISABLED",
            "dpop_bound_access_tokens": false,
            "participate_slo": false
        }
    },
    "profile": {
        "id_token_encrypted_response_alg": null,
        "implicitAssignment": false
    },
    "_links": {
        "uploadLogo": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/logo",
            "hints": {
                "allow": [
                    "POST"
                ]
            }
        },
        "appLinks": [
            {
                "name": "oidc_client_link",
                "href": "https://ashutosh-sahu.okta.com/home/oidc_client/0oa4o1c6848mCZGhW3l7/aln177a159h7Zf52X0g8",
                "type": "text/html"
            }
        ],
        "profileEnrollment": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/policies/rst4jeoc4zN3kl66n3l7"
        },
        "policies": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/policies",
            "hints": {
                "allow": [
                    "PUT"
                ]
            }
        },
        "groups": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/groups"
        },
        "logo": [
            {
                "name": "medium",
                "href": "https://ok8static2.oktacdn.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png",
                "type": "image/png"
            }
        ],
        "clientCredentials": [
            {
                "name": "secrets",
                "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/credentials/secrets"
            }
        ],
        "accessPolicy": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/policies/rst927gxrrCBk9cj03l7"
        },
        "users": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/users"
        },
        "deactivate": {
            "href": "https://ashutosh-sahu.okta.com/api/v1/apps/0oa4o1c6848mCZGhW3l7/lifecycle/deactivate"
        }
    }
}

• Navigate to the application in the Okta Admin Console. The Application ID appears in the URL in the browser's address bar, and the Client ID appears on the General tab when creating or viewing the OIDC application.
  • Application ID from the URL in the browser address bar:

• • Client ID from the application General tab:

NOTE: The Dynamic Client Registration endpoint only functions with and only returns the Client ID, not the Application ID.