Create an application and OAuth client

Step 1: Create an application

Open Applications, choose create, enter a name, optional slug (3–40 lowercase letters/digits/hyphens), description and applicable homepage/privacy/terms URLs. Select User, Org or Dual identity profile and submit. Record app_id from the Overview page.

Step 2: Create an OAuth client

Open application Credentials and create an OAuth client. Choose Public or Confidential, enter redirect URIs and allowed scopes. Profile access needs user:profile:read.

Application and client creation are separate. Use the actual returned client_id, not app_id. Public clients use PKCE and have no client_secret. Confidential client secrets are shown once; save them immediately to secure backend configuration.

Step 3: Authorize a user

The callback must exactly match a registered URI. Use the matching accounts issuer for browser authorization, complete Authorization Code + PKCE, then call the API using quickstart. Application creation does not automatically create user sessions or authorization.