# Is it possible to get a client id/secret for every user instead of app

**URL:** <https://devforum.okta.com/t/is-it-possible-to-get-a-client-id-secret-for-every-user-instead-of-app/22749>\
**Category:** OAuth/OIDC\
**Created:** [December 9, 2022, 4:47pm UTC](https://devforum.okta.com/t/is-it-possible-to-get-a-client-id-secret-for-every-user-instead-of-app/22749 "2022-12-09T16:47:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kiran.saravanakumar](https://avatars.discourse-cdn.com/v4/letter/k/d26b3c/32.png) [@kiran.saravanakumar](https://devforum.okta.com/u/kiran.saravanakumar)\
**Post date:** [December 9, 2022, 4:47pm UTC](https://devforum.okta.com/t/is-it-possible-to-get-a-client-id-secret-for-every-user-instead-of-app/22749/1 "2022-12-09T16:47:28Z")

</div>

Is it possible to get a client id/secret for every user instead of just app. I noticed that the client secrets are generated through the app, but i was wondering if that could be done at a user level

---

<div class="post-metadata">

**Author:** ![erik](https://avatars.discourse-cdn.com/v4/letter/e/b5ac83/32.png) [@erik](https://devforum.okta.com/u/erik)\
**Post date:** [December 11, 2022, 6:08am UTC](https://devforum.okta.com/t/is-it-possible-to-get-a-client-id-secret-for-every-user-instead-of-app/22749/2 "2022-12-11T06:08:13Z")

</div>

Hello @kiran.saravanakumar,

Secrets are associated with the application not individual users assigned the application.

You could choose to use `public/private key` for authentication instead of a secret.  
You are allowed to store multiple key pairs for an application, but there is no association with a specific user account. In addition there really is not a way for an application to know which pair to use to make a /token call as the id of the user logging in is not yet known.

Registering multiple key pairs is intended if you have multiple integrations (possibly different customers) that all use a single logical application registered in Okta. This way if one application access needs to be removed deleting the credentials will not effect the other integrations using the same application in Okta.

Thank You,

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [February 12, 2024, 10:32pm UTC](https://devforum.okta.com/t/is-it-possible-to-get-a-client-id-secret-for-every-user-instead-of-app/22749/3 "2024-02-12T22:32:10Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.