# Create Mosaic applications

To integrate with Mosaic, first create a Mosaic application in the Mosaic Admin Portal. After creating the Mosaic application, add its clients from the Mosaic application details page. This is also where you configure SSO client groups.

Choose the Admin Portal for your environment and region:

- [Sandbox portal](https://portal.sbx.transmitsecurity.io/) for testing and development
- [Portal for global customers](https://portal.transmitsecurity.io/) for US-hosted tenants
- [Portal for EU customers](https://portal.eu.transmitsecurity.io/) for EU-hosted tenants
- [Portal for CA customers](https://portal.ca.transmitsecurity.io/) for CA-hosted tenants
- [Portal for AU customers](https://portal.au.transmitsecurity.io/) for AU-hosted tenants
- [Portal for JP customers](https://portal.gasne1-ts01.transmitsecurity.io/) for JP-hosted tenants


## Create a Mosaic application

1. In the Admin Portal, go to **Management** > **Applications**.
2. From the **Applications** page, click **Create Application**.
3. In the **Create Application** drawer, enter the basic Mosaic application details:
  - **Application name**: Required display name for the application
  - **Application description**: Optional short description shown in the Admin Portal
  - **Application logo**: Optional logo that can be used in Admin Portal and branding-related experiences
4. Click **Save**.


After you save the Mosaic application, it appears in the **Applications** list. Select the Mosaic application to open its details page, where you can continue with client creation and additional configuration.

## Configure clients

Not sure which setup you need? See [Choose a setup for your use case](/guides/user/use_cases) to compare the structures and pick the one that matches your apps.

1. Open the Mosaic application you just created and go to **Clients**.
2. Click **+ Add client**.
3. Choose the client type that matches your use case:
  - **User authentication client**: for end-user authentication. Use [OIDC](/guides/user/configure_oidc_client) or [SAML](/guides/user/configure_saml_client), or turn off OIDC/SAML authentication for backend-based authentication through Mosaic APIs or SDKs.
  - **Service client**: for Fraud Prevention, Identity Verification, and machine-to-machine (M2M) use cases. See [Configure service clients](/guides/user/configure_service_client).
4. Complete the client settings and save.


For journey-orchestrated login, select an **SSO client group** and an **SSO journey** in the client's **Login Experience** step. Create the group beforehand or inline while adding the client. The group determines where the login screens are hosted and sets the SSO session timeout; each client selects its own journey and, for Mosaic-hosted screens, style. See [Configure SSO](/guides/user/sso_orchestration/sso_config_service#client-groups).

For the complete client creation procedures, see [Manage clients](/guides/user/manage_clients).