---
title: "POST /client/register"
method: POST
path: "/client/register"
---

# POST /client/register

`POST /client/register`

Registers a client with IAM Identity Center. This allows clients to initiate device authorization. The output should be persisted for reuse through many authentication requests.

## Request body

- object
  - `clientName` string, required — The friendly name of the client.
  - `clientType` string, required — The type of client. The service supports only <code>public</code> as a client type. Anything other than public will be rejected by the service.
  - `scopes` Scope[] — The list of scopes that are defined by the client. Upon authorization, this list is used to restrict permissions when granting an access token.

## Response `200`

Success

- RegisterClientResponse
  - `clientId` string — The unique identifier string for each client. This client uses this identifier to get authenticated by the service in subsequent calls.
  - `clientSecret` string — A secret string generated for the client. The client will use this string to get authenticated by the service in subsequent calls.
  - `clientIdIssuedAt` integer — Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> were issued.
  - `clientSecretExpiresAt` integer — Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> will become invalid.
  - `authorizationEndpoint` string — The endpoint where the client can request authorization.
  - `tokenEndpoint` string — The endpoint where the client can get an access token.

## Other responses

- `480` — InvalidRequestException
- `481` — InvalidScopeException
- `482` — InvalidClientMetadataException
- `483` — InternalServerException

---

[API](https://skmtc.net/aws/apis/sso-oidc.md) · [All operations](https://skmtc.net/aws/apis/sso-oidc/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/sso-oidc/versions/106a5b18f52b/schema)