All Products
Search
Document Center

Resource Access Management:Create an application secret

Last Updated:Nov 24, 2025

When an OAuth 2.0 application calls Alibaba Cloud APIs, a client secret is required. This secret serves as a credential to authenticate the application's identity when it requests an access token. In contrast, OAuth 2.1 applications support the dynamic client registration mechanism and do not use static client secrets for authentication. This topic describes how to create a secret for an application.

Procedure

  1. Log on to the RAM console as a RAM administrator.

  2. In the left-side navigation pane, choose Integrations > OAuth Preview.

  3. On the Enterprise Application tab, click the name of the application that you want to manage.

  4. Click the Application Secret tab and then click Create Secret.

  5. In the Create Secret dialog box, view and copy the secret and click Close.

    Note
    • The application secret is displayed only during creation and cannot be queried. Save the secret at the earliest opportunity.

    • You can create up to two secrets for an application.