---
schema_version: "1"
id: 9bd7f519168d55618793715c90cff3a67093e0d1a04ece6b5e11f7f81d535306
title: Configuring OpenAM Client Providers in Anypoint Platform
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/access-management/conf-client-mgmt-openam-task.md
canonical_url: https://docs.mulesoft.com/access-management/conf-client-mgmt-openam-task
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 54ee20801bbb1abe9e3492d31c6b8efc7db0cd919c35dbd97fbc39b289417e6d
description: MuleSoft Documentation Site
latest: true
---
---
product: Access Management
version: master
---

# Configuring OpenAM Client Providers in Anypoint Platform

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Register API clients through OpenAM 14 by configuring an OpenAM client provider in Anypoint
Platform. Map OAuth2 authorization, token, validation, and client management endpoints along with
admin token credentials to your deployment. Apply the OpenAM OAuth token enforcement policy to APIs
through API Manager.

> [!NOTE] Anypoint Platform doesn’t show plaintext client secrets or static authorization header
> values for API clients registered through external client providers. A **Show** control appears,
> but values remain masked. View your credentials in the external client provider.

1.  Sign in to Anypoint Platform using an account that has the Organization Administrator
    permission.

2.  Select **Access Management** from the ![gear icon](/mulesoft/current/en-us/access-management/_images/gear.svg) menu.

3.  In the **Business Groups** menu, select your root organization.

4.  In the Access Management navigation menu, click **Client Providers**.

5.  Click **Add Client Provider**, and then select **OpenAM**.

    The **Add OpenAM client provider** page appears.

6.  Fill in these required fields:

    - Version

      OpenAM version 14.

    - Admin Token Provider

      - Create URL

        The endpoint that creates an access token for OAuth authentication.

      - Username

        The name of the user requesting access.

      - Password

        The password of the user requesting access.

    - OAuth2 Authorization Provider, Authorize URL

      `/oauth2/authorize`, relative to the base path of the OpenAM application. Provide the absolute
      URL (base URI and path).

    - OAuth2 Token Provider, Create URL

      `/oauth2/access_token`, relative to the base path of the OpenAM application. Provide the
      absolute URL (base URI and path).

    - OAuth2 Token Validation Provider

      - Validate URL

        The token validation endpoint is `/oauth2/tokeninfo` relative to the base path of the OpenAM
        application.

      - Username Token Mapping

        Name of user with privileges for creating new clients within the target OpenAM system.

    - OAuth2 Client Provider

      - Create URL

        The URL at which the OpenAM client management API resources are served. Normally the
        endpoint is located at `/oauth2/client`. Confirm with your OpenAM administrator.

      - Delete URL

        URL destination for sending a DELETE request to delete a test client.

      - Scopes

        Supported OAuth capabilities, such as READ and WRITE.

      - Default Scopes

        Default OAuth capabilities to use in the event the client app does not specify any.

7.  Save your configuration.

## See Also

- [Configure OAuth 2.0 Provider in Mule](https://docs.mulesoft.com/api-manager/latest/mule-oauth-provider-landing-page)

- [Apply the OpenAM OAuth Token Enforcement Policy to Your APIs](https://docs.mulesoft.com/mule-gateway/policies-included-openam-oauth-token-enforcement)

- [Migrate Client Applications for APIs with External Client Providers in API Manager](https://docs.mulesoft.com/api-manager/latest/migrate-client-apps#migrate_with_external)