---
title: "Credential Management Page"
slug: "s3suite94-credential-management-page"
updated: 2026-10-27T18:41:44Z
published: 2026-10-27T18:41:44Z
canonical: "docs.onespan.com/s3suite94-credential-management-page"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Credential Management Page

The Federated credential management page allows an end user to register a new authenticator and manage existing registrations. This page is available to any user with a valid JSON Web Token (JWT). You can obtain the ID token, which is a JWT, from any external OIDC-compliant identity provider (IdP).

To make use of the credential management page included in nnlfedapp, follow these steps:

To deploy these utility apps during Server installation, set the installation property DEPLOY_OPTIONAL_WEB_APP_LIST in the nnl-install.properties file. See *Install on Linux* section [List Optional Web Applications](/dpoa/docs/s3suite94-step-3-set-up-the-installation-properties-file#i-list-optional-web-applications) for more information.

**Step 1.** You have 2 options, depending on where you would like to deploy nnlfedapp:

**Option a.** To deploy nnlfedapp with the S3 Suite during Server installation, set the installation property DEPLOY_OPTIONAL_WEB_APP_LIST in the nnl-install.properties file. See *Install on Linux* section [List Optional Web Applications](/dpoa/docs/s3suite94-step-3-set-up-the-installation-properties-file#i-list-optional-web-applications) for more information.

**Option b.** To deploy nnlfedapp on a Tomcat server of your choice, extract nnlfedapp.war from the Nok Nok Web App SDK package into the webapps directory of your chosen application server.

**Step 2.** Add nnlfedapp as an OIDC client in your Identity Provider Configuration. See table of [External Identity Provider Configuration](/dpoa/docs/s3suite94-federated-identity-management#external-identity-provider-configuration) fields for details including clientId, clientSecret and other important configuration parameters.

**Step 3.** Examine your external IdP server to find the OIDC endpoints. You need one of the following:

- authorizationEndPoint, tokenEndpoint and userInfoEndPoint
- the OpenID discovery endpoint, which is the issuerUri provided by your external identity provider

**Step 4.** Create a configuration JSON file for your external identity provider. See [External Identity Provider Configuration](/dpoa/docs/s3suite94-federated-identity-management#external-identity-provider-configuration) for details.

**Step 5.** Log into the Nok Nok Admin Console and go to **Configuration > API Server.**

![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/Screenshot 2025-12-19 at 8.04.55 AM.png?sv=2026-02-06&spr=https&st=2026-10-29T02%3A58%3A39Z&se=2026-10-29T03%3A58%3A39Z&sr=c&sp=r&sig=T55dNUtqO%2BUpUdxHB2I5ZM1VnbLhWqmfUBMfzSMWafc%3D)

In the **Federated Identity Management** panel, expand the **External Identity Providers** panel. Click **Add OIDC Provider** to upload the configuration file you created in Step 4. Click C**hoose File**, click **Submit**, and then click **Activate** on the right.

![](https://cdn.document360.io/038f59a7-abd0-4c14-9de7-3434d28b49fd/Images/Documentation/Screenshot 2025-12-19 at 8.06.41 AM.png?sv=2026-02-06&spr=https&st=2026-10-29T02%3A58%3A39Z&se=2026-10-29T03%3A58%3A39Z&sr=c&sp=r&sig=T55dNUtqO%2BUpUdxHB2I5ZM1VnbLhWqmfUBMfzSMWafc%3D)

**Step 6.** In your web browser, navigate to the following URL to access the Federation Credential Management page.

```plaintext
https://<host>/nnlfedapp/req.jsp?reg_id=<registrationId>&tenant_id=<tenant_id>
```