Skip to main content

Add server-side web application

A server-side web application runs on a backend server. Node.js, Java, and .NET are common examples. An online banking portal or e-commerce account dashboard are typical use cases: the server fetches data, renders the page, and returns it to the browser. Unlike a browser-based application, the code runs on the server where it is not publicly visible.

Because the server can safely store secrets, SecureAuth registers these applications with both a Client ID and a Client Secret. The secret authenticates your server during sign-in. Treat it like a password: do not include it in client-side code or commit it to a public repository.

Before you begin​

You'll need:

  • Access to your workspace in SecureAuth
  • The redirect URI where users should land after signing in (your application's callback URL)
  • Access to your application's server configuration

Add the application​

  1. In your workspace, select Applications > Clients > Create client.

  2. Enter a name for your application, select Server-side Web, and click Create.

    The Create Application form with the application name filled in and the Server-side Web application type selected. Each type card lists the frameworks its Quickstart supports.The Create Application form with the application name filled in and the Server-side Web application type selected. Each type card lists the frameworks its Quickstart supports.

  3. Open the application's Overview tab. In the right panel, click + Setup a redirect URI and enter your application's callback URL.

    The redirect URI is the URL where SecureAuth sends users after they sign in. This must match the callback URL in your application code.

  4. Copy the Client ID and Client Secret from the right panel. You'll need both when configuring your application code.

    The Overview tab of the Partner Dashboard application, with the right panel showing the Client ID, the masked client secret, and the redirect URIThe Overview tab of the Partner Dashboard application, with the right panel showing the Client ID, the masked client secret, and the redirect URI

Integrate with your application​

After creating the client in SecureAuth, use the Quickstart tab to get framework-specific integration code pre-filled with your application's configuration.

Open the Quickstart tab guide for step-by-step instructions, code snippets for .NET, Java, and Node.js, and a link to clone a full working example.

Test the integration​

  1. Start your application server.
  2. Navigate to the login page.
  3. Verify that users are redirected to SecureAuth for authentication.
  4. After signing in, confirm users are redirected back to your application.

Next steps​