# Obtain Credentials Visit the [Developer Portal](#developer-portal-access) to register your application, below are the 3 fields required for creating an OAuth 2.0 application. ### Application Properties ![Obtain Credentials](/create_app_modal_rework.png) | Field | Description | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Name** | A meaningful name for your OAuth 2.0 application (e.g. EH API Test Client) | | **Scope** | A list of scopes which the application can access. The scope list will be provided by Employment Hero.**NOTE**: For security and data sensitivity concerns, scopes are a one-time selection on application creation. | | **Redirect URI(s)** | One or more URIs hosted by your company which a user will be redirected to following a successful OAuth handshake. Use a comma-separated list to add multiple redirect URIs. Please note that for security purposes, we request that you provide HTTPS URIs. | After registering a new OAuth 2.0 application, you can update your application properties **except the scopes**. The set of credentials includes client ID, secret and your application. Visit the application details page for the set of credentials (e.g. client ID, secret, application information) you will require in the upcoming steps. Below is the description of the generated credentials from the registration. ### Credentials ![Credentials](/detail_app_modal_rework.png) | Attribute | Description | | ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Client ID** | A unique string representing the registration OAuth 2.0 application. | | **Client Secret** | A random secret used by client to authenticate to the Employment Hero Authorisation Server. The client secret is a secret known only to the client and authorisation server. |