> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/register-and-configure-applications/adding-an-application/entering-the-application-details/configuring-an-openid-application.md).

# Configuring an openid application

Choose **OpenID** as the integration protocol.

![Selecting OpenID.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/7Irott9pzws2ICQraNIF/assets/image28.png)

![The OpenID Configuration section.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/iSl4Z50vxXIis8pbSofz/assets/image29.png)

| Field                          | Description                                                                                   |
| ------------------------------ | --------------------------------------------------------------------------------------------- |
| **Client ID**                  | Generated by SECUREpass                                                                       |
| **Client Secret**              | Click **Generate** to create it                                                               |
| **Redirect URIs**              | Where the application receives the authorisation response. **+ Add More** for additional URIs |
| **Logout URL**                 | Where users are sent after signing out                                                        |
| **Grant Types**                | The OAuth grant types the application uses, for example `authorization_code`                  |
| **Scopes**                     | The scopes the application may request, for example `openid`                                  |
| **Access Token Type**          | **JWT** or **Opaque**                                                                         |
| **PKCE**                       | **Required** or **Not Required**                                                              |
| **User Identifier Type**       | **Public** or **Private**                                                                     |
| **Token Endpoint Auth Method** | How the application authenticates to the token endpoint, for example `client_secret_basic`    |

Click **Next**. **Assign Roles** and **Authentication** then work exactly as described in sections 1.5 and 1.6. Click **Submit** and the application appears in the list.

<figure><img src="https://1468029039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FW2srIAMN6RKFwvuEorV5%2Fuploads%2FhP0Dgcc9kGzveOyrRzqv%2Fimage.png?alt=media&amp;token=d60b68b8-9d3e-49b7-a43c-f7c3b3093f1e" alt=""><figcaption></figcaption></figure>