# Create API in Java Spring Boot

**URL:** <https://devforum.okta.com/t/create-api-in-java-spring-boot/9178>\
**Category:** Questions\
**Created:** [April 30, 2020, 7:52pm UTC](https://devforum.okta.com/t/create-api-in-java-spring-boot/9178 "2020-04-30T19:52:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![otahor](https://avatars.discourse-cdn.com/v4/letter/o/df705f/32.png) [@otahor](https://devforum.okta.com/u/otahor)\
**Post date:** [April 30, 2020, 7:52pm UTC](https://devforum.okta.com/t/create-api-in-java-spring-boot/9178/1 "2020-04-30T19:52:59Z")

</div>

Hi there,

I’m planning to ask user to login to my web application, and after then, manually I would like to approve which one of them can get access to the API using access\_token. If I understand correctly, they first need to login to my “Okta Web Application” and then, I can provide them access to another application, this time “Okta Service Application”. I build two application as mentioned at the example and I tried to sign in as a customer. When I signed in to the Okta Web Application, everything works well and I was able to login and see this use at my Admin Dashboard. However, I couldn’t understand how do I enable this user to get access to the Okta Service Application. My expectations was that I’ll be able to share with him through Okta a new client\_id + secret\_id so he can create a new token for himself. However, I add this user to almost every existing group but from the user (customer, means not Admin) side I always see the message - “You don’t have any apps.”. Any idea what can I do, or what I do wrongly?

Thanks in advance,  
Ofir

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [May 4, 2020, 1:58am UTC](https://devforum.okta.com/t/create-api-in-java-spring-boot/9178/2 "2020-05-04T01:58:00Z")

</div>

Hi @otahor

By default, OpenID Connect applications are not displayed on the end-user dashboard in order to not bound them to a specific authorization server and have standardized `state` and `nonce` values.

If you would like to have the application displayed on the end-user dashboard, then I would recommend to have a generic endpoint that initiates the SSO to Okta (for example [https://example.com/sso/okta](https://example.com/sso/okta)) and add it as a [Bookmark application](https://support.okta.com/help/s/article/How-do-you-create-a-bookmark-app) in Okta. This application would need to be assigned to the same users that have access to the OpenID Connect application.

Once the users click on the bookmark application, they will be redirected to your generic endpoint and, from there, the authorization flow will begin.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 24, 2024, 7:14pm UTC](https://devforum.okta.com/t/create-api-in-java-spring-boot/9178/3 "2024-01-24T19:14:26Z")

</div>

Closed on January 24, 2024, 7:14pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.