Configure a Confidential Application

To register the Oracle Identity Cloud Service Linux Pluggable Authentication Module (PAM) as a client application in Oracle Identity Cloud Service, you create a confidential application with the POSIX Viewer role.

  1. In the Identity Cloud Service console, expand the Navigation Drawer, and then click Applications.
  2. Click Add.
  3. In the Add Application page, click Confidential Application.
  4. In the App Details pane of the Add Confidential Application window, enter the name of the application.
  5. Click Next to proceed.
    A confirmation message indicates that the application has been added in a deactivated state.
  6. Click Configure this application as a client now and then check the Client Credentials and JWT Assertion check boxes.
  7. In the Grant the client access to Identity Cloud Service Admin APIs, click Add, and select the Signin, and Me, and POSIX Viewer roles.
    Always assign the POSIX VIEWER role to the application. Don’t assign the POSIX VIEWER Role to any users or groups; including users with administration privileges, for example, Identity Domain Administrators.
  8. Click Next to proceed.
  9. Continue to click Next through the remaining screens, then click Finish.
  10. Take note of the Client ID and Client Secret that appear in the Application Added window.
  11. Click Close.
  12. Click Activate and in the Confirmation window click OK.