---
title: "Credential management page"
slug: "dpo-iam-integration-credential-management-page"
updated: 2026-10-27T19:53:14Z
published: 2026-10-27T19:53:14Z
canonical: "docs.onespan.com/dpo-iam-integration-credential-management-page"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Credential management page

The Federated credential management page allows an end user to register a new authenticator and manage existing registrations. This page is available to any user with a valid JSON Web Token (JWT). You can obtain the ID token, which is a JWT, from any external OIDC-compliant identity provider (IdP).

To make use of the credential management page included in nnlfedapp, follow these steps:

To deploy these utility apps during Server installation, set the installation property DEPLOY_OPTIONAL_WEB_APP_LIST in the nnl-install.properties file. See *Install on Linux* section [List Optional Web Applications](/dpoa/docs/s3suite94-step-3-set-up-the-installation-properties-file-1#i-list-optional-web-applications) for more information.

**Step 1.** You have 2 options, depending on where you would like to deploy nnlfedapp:

**Option a.** To deploy nnlfedapp with Digipass S3 Software during Server installation, set the installation property DEPLOY_OPTIONAL_WEB_APP_LIST in the nnl-install.properties file. See *Install on Linux* section [List Optional Web Applications](/dpoa/docs/s3suite94-step-3-set-up-the-installation-properties-file-1#i-list-optional-web-applications) for more information.

**Option b.** To deploy nnlfedapp on a Tomcat server of your choice, extract nnlfedapp.war from the Digipass S3 Web App SDK package into the webapps directory of your chosen application server.

**Step 2.** Add nnlfedapp as an OIDC client in your Identity Provider Configuration. See table of [External Identity Provider Configuration](/dpoa/docs/s3suite94-federated-identity-management-1#external-identity-provider-configuration) fields for details including clientId, clientSecret and other important configuration parameters.

**Step 3.** Examine your external IdP server to find the OIDC endpoints. You need one of the following:

- authorizationEndPoint, tokenEndpoint and userInfoEndPoint
- the OpenID discovery endpoint, which is the issuerUri provided by your external identity provider

**Step 4.** Create a configuration JSON file for your external identity provider. See [External Identity Provider Configuration](/dpoa/docs/s3suite94-federated-identity-management-1#external-identity-provider-configuration) for details.

**Step 5.** Log into the Digipass S3 Admin Console and go to **Configuration > API Server.**

![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/Screenshot 2026-03-03 at 11.24.08 AM.png?sv=2026-02-06&spr=https&st=2026-10-29T02%3A38%3A15Z&se=2026-10-29T03%3A38%3A15Z&sr=c&sp=r&sig=Q4MskW7xxvZH04tXoAGl%2FbSYFLU9WRKX9xrXSax%2BjCk%3D)

In the **Federated Identity Management** panel, expand the **External Identity Providers** panel. Click **Add OIDC Provider** to upload the configuration file you created in Step 4. Click **Choose File**, click **Submit**, and then click **Activate** on the right.

![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/Screenshot 2025-12-19 at 8.06.41 AM.png?sv=2026-02-06&spr=https&st=2026-10-29T02%3A38%3A15Z&se=2026-10-29T03%3A38%3A15Z&sr=c&sp=r&sig=Q4MskW7xxvZH04tXoAGl%2FbSYFLU9WRKX9xrXSax%2BjCk%3D)

**Step 6.** In your web browser, navigate to the following URL to access the Federation Credential Management page.

```plaintext
https://<host>/nnlfedapp/req.jsp?reg_id=<registrationId>&tenant_id=<tenant_id>
```