To integrate with Mosaic, first create an application in the Mosaic Admin Portal. After the application is created, client setup continues either from the application details page or from the SSO Service configuration, depending on your implementation.
Choose the Admin Portal for your environment and region:
- Sandbox portal for testing and development
- Portal for global customers for US-hosted tenants
- Portal for EU customers for EU-hosted tenants
- Portal for CA customers for CA-hosted tenants
- Portal for AU customers for AU-hosted tenants
- Portal for JP customers for JP-hosted tenants
In the Admin Portal, go to Management > Applications.
From the Applications page, click Create application.
In the Create application drawer, enter the basic application details:
- Application name: Required display name for the application
- Application description: Optional short description shown in the Admin Portal
- Application logo: Optional logo that can be used in Admin Portal and branding-related experiences
Click Save.
After you save the application, it appears in the Applications list. Select the application to open its details page, where you can continue with client creation and additional configuration.
Creating an application is the shared starting point for Mosaic integrations.
After that, choose the client setup that matches your architecture:
- App clients are configured inside the application and are used for regular application integrations (for example, end-user authentication, backend-based authentication, and API-only service integrations).
- SSO clients are configured as part of the SSO Service and are used when apps participate in a centralized SSO experience.
Open the application you just created and go to Clients.
Click + Add client.
Choose the client path that matches your use case:
- For end-user authentication or backend-based authentication tied to your application, select User authentication client and then continue with either protocol-based authentication (OIDC or SAML) or backend-based authentication with OIDC/SAML authentication turned off.
- For API-only backend-to-backend service integrations, select a service client.
Complete the basic settings for the client type you selected, then click Save.
For the full application-client procedures, see Manage clients.