This guide explains how to create and manage an OAuth2/OpenID Connect (OIDC) application to allow a third-party application to use your Infomaniak login ID to authenticate users and, with their permission, access the resources provided by the granted authorizations (scopes).

Introduction

• An OAuth2 application is used, in particular, to implement a single sign-on (Single Sign-On) mechanism or to allow software to access certain data without having to transmit the account password.

Manage Infomaniak OAuth2 Applications

To create a new OAuth2 application:

1. Click here to access the management of your OAuth2 applications in the Infomaniak Manager (need help?).
2. Click on the blue Create a new application button:
   
3. Choose the application type that corresponds to your project. This choice determines, in particular, the OAuth2 authentication flow used.
4. Give the application a name so you can easily identify it in the Manager.
5. Enter the application's URL according to its technical configuration (e.g., its public URL or its redirect URL, depending on the type of application).
6. Click on the button to create the application:
   
7. Keep the Client ID and Client secret in a safe place.
   • These credentials allow your application to authenticate with Infomaniak services.
   • For security reasons, the Client secret is only displayed once when it is created:
     
   • However, you can renew the secret phrase from the main page.