Create Your First Client
To create a new client:
Sign in: Navigate to https://dashboard.truevault.com.au/ and sign in with your credentials. (Use https://dashboard.sandbox.truevault.com.au/ for sandbox access)
Settings Once logged in, hover over
Settingsin the main menu.OIDC Clients: Click on
OAuth OIDC Clientsfrom the drop down.Add a new Client configuration: Under the OAuth Clients section (first on the page), click
Create a New Client.
Configuration Guidance
Client Name is only shown to you internally, so you can stay organised
Default Purpose is shown to the end user when requesting permission to share some of their data
Enabled Rulesets are all the different rulesets that can be requested using the
rulesetparamter in the authorization requestIf a ruleset is requested and not enabled, the authorization flow will return an error
The string shown in quare brackets at the end of each option [like_so] is the string to use in authorization requests
Default Ruleset is the ruleset that will apply when no ruleset argument is present in the authorization request
- This must be one of the enabled rulesets, as above
Scopes vary by use-case.
For a siple human check and no personal details you can use simply
openidFor a complete user onboarding, select
openid,email,phoneandprofileIf using the service as a login/authentication solution, select
offline_access, along with the aboveNote that
addressis not used in the current version
Grants will require a minimum of
authorization_code.Add
refresh_tokenif using for session management or repeats useclient_credentialsandpasswordare currently unused
Token endpoint should be
Cient secret basic, unless you understand how to use secret post, and have a need to do soAllowed redirect URLs should include the callback URL for your OAuth integration
Allowed logout URLs is optional, and used to ensure a session logout event goes to an approved URL after logout