---
title: "Get OIDC client"
method: GET
path: "/api/v1/clients/{inum}"
---

# Get OIDC client

`GET /api/v1/clients/{inum}`

Get a specific OIDC client

## Path parameters

- `inum` string, required

## Response `200`

Success

- OxAuthClient
  - `dn` string
  - `selected` boolean
  - `inum` string
  - `displayName` string, required
  - `description` string, required
  - `oxAuthAppType` 'web' | 'native', required
  - `contacts` string[]
  - `oxAuthRedirectURIs` string[]
  - `oxAuthPostLogoutRedirectURIs` string[]
  - `oxAuthScopes` string[]
  - `oxAuthClaims` string[]
  - `encodedClientSecret` string, required
  - `associatedPersons` string[]
  - `oxAuthTrustedClient` boolean
  - `responseTypes` string[]
  - `grantTypes` string[]
  - `logoUri` string
  - `clientUri` string
  - `policyUri` string
  - `tosUri` string
  - `jwksUri` string
  - `jwks` string
  - `sectorIdentifierUri` string
  - `subjectType` 'pairwise' | 'public'
  - `idTokenTokenBindingCnf` string
  - `rptAsJwt` boolean
  - `accessTokenAsJwt` boolean
  - `accessTokenSigningAlg` 'none' | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `idTokenSignedResponseAlg` 'none' | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `idTokenEncryptedResponseAlg` 'RSA1_5' | 'RSA-OAEP' | 'A128KW' | 'A256KW'
  - `idTokenEncryptedResponseEnc` 'A128CBC+HS256' | 'A256CBC+HS512' | 'A128GCM' | 'A256GCM'
  - `userInfoSignedResponseAlg` 'none' | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `userInfoEncryptedResponseAlg` 'RSA1_5' | 'RSA-OAEP' | 'A128KW' | 'A256KW'
  - `userInfoEncryptedResponseEnc` 'A128CBC+HS256' | 'A256CBC+HS512' | 'A128GCM' | 'A256GCM'
  - `requestObjectSigningAlg` 'none' | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `requestObjectEncryptionAlg` 'RSA1_5' | 'RSA-OAEP' | 'A128KW' | 'A256KW'
  - `requestObjectEncryptionEnc` 'A128CBC+HS256' | 'A256CBC+HS512' | 'A128GCM' | 'A256GCM'
  - `tokenEndpointAuthMethod` 'client_secret_basic' | 'client_secret_post' | 'client_secret_jwt' | 'private_key_jwt' | 'none'
  - `tokenEndpointAuthSigningAlg` 'none' | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `defaultMaxAge` integer
  - `requireAuthTime` boolean
  - `postLogoutRedirectUris` string[]
  - `claimRedirectURI` string[]
  - `logoutUri` string[]
  - `logoutSessionRequired` boolean
  - `oxAuthPersistClientAuthorizations` boolean
  - `oxIncludeClaimsInIdToken` boolean
  - `oxRefreshTokenLifetime` integer
  - `accessTokenLifetime` integer
  - `defaultAcrValues` string
  - `initiateLoginUri` string
  - `exp` string, date-time
  - `requestUris` string[]
  - `authorizedOrigins` string[]
  - `softwareId` string
  - `softwareVersion` string
  - `softwareStatement` string
  - `disabled` boolean
  - `oxdId` string
  - `oxAuthClientSecret` string
  - `deletable` boolean
  - `attributes` ClientAttributes
    - `tlsClientAuthSubjectDn` string
    - `runIntrospectionScriptBeforeAccessTokenAsJwtCreationAndIncludeClaims` boolean
    - `keepClientAuthorizationAfterExpiration` boolean
    - `allowSpontaneousScopes` boolean
    - `spontaneousScopes` string[]
    - `spontaneousScopeScriptDns` string[]
    - `backchannelLogoutUri` string[]
    - `backchannelLogoutSessionRequired` boolean
    - `additionalAudience` string[]
    - `postAuthnScripts` string[]
    - `consentGatheringScripts` string[]
    - `introspectionScripts` string[]
    - `rptClaimsScripts` string[]
    - `idTokenLifetime` integer
  - `backchannelAuthenticationRequestSigningAlg` 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512'
  - `backchannelTokenDeliveryMode` string
  - `backchannelClientNotificationEndpoint` string
  - `backchannelUserCodeParameter` boolean
  - `baseDn` string

## Other responses

- `500` — Server error

---

[API](https://skmtc.net/gluufederation/apis/oxtrust-api.md) · [All operations](https://skmtc.net/gluufederation/apis/oxtrust-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxtrust-api/versions/283dde2d4ad4/schema)