---
title: "Set Up App-Registration-Based Access for External Applications"
slug: "add-app-registrations-to-the-config-server"
description: "Instructions for creating and using app registrations that permit applications to use web services hosted by Lasernet Core environments."
tags: ["App registration", "Lasernet Core 11"]
updated: 2026-08-03T09:30:55Z
published: 2026-08-03T09:30:55Z
canonical: "kb.lasernetgroup.com/add-app-registrations-to-the-config-server"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.lasernetgroup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set Up App-Registration-Based Access for External Applications

If the Lasernet Core configuration that is deployed to an environment contains a configured [Web Server input](/v1/docs/web-server), that environment will host web services that external applications can connect to. One of the authentication types supported by that input module is based on a “client credentials” authentication flow.

To enable an external application or service (such as another Lasernet Group application or a third-party application) to connect to a Lasernet Core web service through this client credentials flow, you must create an app registration for it (in Manage or the Lasernet Config web app) and then configure the app registration’s permissions to allow the app to connect. The [Set Up an App Registration](/v1/docs/add-app-registrations-to-the-config-server#set-up-an-app-registration) section below describes how to do this.

This page also describes how to [reset the external application’s client secret](/v1/docs/add-app-registrations-to-the-config-server#reset-the-client-secret).

> [!NOTE]
> Note
> 
> You will require an understanding of web services and how to make requests to them.

> [!NOTE]
> Note
> 
> If Lasernet Core is configured to use an external authentication provider (such as Microsoft Entra ID), the **App Registrations** page is not present, and it is not possible to complete the processes described below.

## Set Up an App Registration

This process involves creating an app registration (to represent the external application) and then adding it to appropriate groups and security roles.

### Manage

1. [Sign in to Manage](/v1/docs/sign-in-to-the-lasernet-core-administration-tool).
2. In the **System Configuration** menu, click **App Registrations**.

![The App Registrations menu item in the System Configuration menu.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/app registrations menu item.png)
3. Click **New App Registration**.

![A rectangle around the New App Registration button.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new app registration button.png)
4. In the **New App Registration** window, enter an appropriate **Name** that identifies the external application, and (optionally) enter a **Description**.
5. By default, the **Disabled** checkbox is cleared. To create the app registration in an inactive state (so that you can make it active later), select the **Disabled** checkbox.
6. Click **Confirm**. The Lasernet Config app displays a **Client Info** window that contains a **Client Id** and **Client secret**.

![The Client Info window that displays a Client Id and Client Secret.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/client info window(1).png)
7. In the **Client** **Secret** window, click the copy buttons (at the end of each box) to copy the client ID and client secret. Store these in a secure place. You will need these when you [configure the external application to authenticate with the web service](/v1/docs/add-app-registrations-to-the-config-server#external-application-authentication-process). To unobscure the client secret, click the eye icon.

> [!NOTE]
> Note
> 
> After the **Client Secret** window closes, it is not possible to display the app registration’s client secret in Manage. So, it is important to copy the client secret and store it securely now.
8. Click **Close**. You have successfully created an app registration.

> [!TIP]
> Tip
> 
> To display the app registration’s client ID, click its tile on the **App Registrations** page.
9. Add the app registration to an appropriate group:
  1. In the **User Management** menu, click **Groups**.
  2. Click the group that you want to add the app registration to. The group properties pane opens.
  3. In the **App Registrations** area of the pane, select the app registration from the **Group App Registrations** list.
  4. Click **Confirm**.
10. Add that group to the **All Rights** security role in the **Web Server** category:
  1. In the **User Management** menu, click **Security Roles**.
  2. Click the **Web Server** tab.
  3. Click the **All Rights** tile. The role properties pane opens.
  4. In the **Members** area of the pane, click a blank part of the **Security Role Members** list and select the group that you added the app registration to.
  5. Click **Confirm**.

The application is now authorized to connect to Lasernet Core web services.

> [!WARNING]
> Important
> 
> If you created the app registration in a disabled state, [enable it](/v1/docs/add-app-registrations-to-the-config-server#edit-an-app-registration) before it is used.

> [!NOTE]
> Note
> 
> The final part of the solution is to appropriately configure the Web Server input in the Lasernet Core configuration. For more information about this input module, see [Web Server Input](/v1/docs/web-server) in the Lasernet Developer guide.

### Lasernet Config Web App

> [!NOTE]
> Note
> 
> The Lasernet Config web app was provided with earlier versions of Lasernet Core. It is a legacy web app and will be deprecated in a future version of Lasernet Core.

**Expand for information**

1. Sign in to the Lasernet Config web app.
2. In the **Tools** menu, click **App Registrations**.
3. In the toolbar, click **Add**.
4. In the **Add App Registration** window, enter an appropriate **Name** that identifies the external application, and (optionally) enter a **Description**.
5. By default, the **Disabled** checkbox is cleared. To create the app registration in an inactive state (so that you can make it active later), select the **Disabled** checkbox.
6. Click **OK**. The Lasernet Config app displays a **Client Secret** window that contains a **Client Id** and **Client secret**.
7. In the **Client Secret** window, click the copy buttons (at the end of each box) to copy the client ID and client secret. Store these in a secure place. You will need these when you [configure the external application to authenticate with the web service](/v1/docs/add-app-registrations-to-the-config-server#external-application-authentication-process). To unobscure the client secret, click the eye icon.

> [!NOTE]
> Note
> 
> After the **Client Secret** window closes, it is not possible to display the app registration’s client secret in the Lasernet Config app. So, it is important to copy the client secret and store it securely now.
8. Click **OK**. You have successfully created an app registration.
9. Add the app registration to an appropriate group:
  1. In the **Tools** menu, click **Users and Groups**.
  2. Click the group that you want to add the app registration to, and then click **Edit** in the toolbar. The **Group Properties** window opens.
  3. On the **App Registrations** tab, click **Add**, select the app registration from the **Select application to add** list, then click **OK**.
  4. Click **OK** to close the **Group Properties** window.
10. Add that group to the **All Rights** security role in the **Web Server** category:
  1. In the **Tools** menu, click **Security Roles**.
  2. In the main area of the window, click the **All Rights** security role in the **Web Server** category, and then click **Edit** in the toolbar.
  3. On the **Members** tab of the **WebServer Role Properties** window, click **Add**.
  4. In the **Add Role Member** window, select the group that you want to add to the role.
  5. Click **OK**. The group is added to the member list.
  6. Click **OK** to close the **WebServer Role Properties** window.

The application is now authorized to connect to Lasernet Core web services.

> [!NOTE]
> Note
> 
> The final part of the solution is to appropriately configure the Web Server input in the Lasernet Core configuration. For more information about this input module, see [Web Server Input](/v1/docs/web-server) in the Lasernet Developer guide.

### External Application Authentication Process

To use the web services hosted by a Lasernet Core environment, the application must use its client ID and client secret to request a token from the Config Server, and then include that token in the authorization header of its requests to the Lasernet Core web services. This process is the “client credentials” flow.

#### Request a Token from the Config Server

Config Server provides a token endpoint at `https://<config server hostname>/lasernet/connect/token` (appropriately substitute `<config server hostname>` ; if necessary, include a port number).

Make a `POST` request to the token endpoint. Ensure that the request:

- Has a `content-type` of `application/x-www-form-urlencoded`
- Includes the following URL parameters:
  - `grant_type`
    - Set to `client_credentials`.
  - `client_id`
    - Set to the application’s client ID.
  - `client_secret`
    - Set to the application’s client secret.

Example cURL command:

```cURL
curl --request POST \
  --url 'https://localhost/lasernet/connect/token' \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data grant_type=client_credentials \
  --data client_id=6ea896d9-73f4-4a2f-adc4-3c813c0fdecf \
  --data client_secret=eWZyZDBBOE4yRWZ6dXZkWlpxajNkMnRDU09VRjd2QVVu
```

If the request succeeds, the response will include a token. Extract the token so that you can use it in web service requests.

#### Use the Token in the Authorization Header of Web Service Requests

Use the token in requests to the Lasernet Core web service by adding an authorization header to your requests in the following format:

`Authorization: Bearer <token>`

Replace `<token>` with the application’s token.

## Reset the Client Secret

If you lose an app registration’s client secret, you must reset its client secret (to generate a new one). It is not possible to display an app registration’s current client secret. Follow these steps.

### Manage

1. In the **System Configuration** menu, click **App Registrations**.
2. On the app registration’s tile, click the menu button (three vertical dots), then click **Reset Client Secret**.
3. In the confirmation window, click **Confirm**.
4. In the **Client Secret** **Reset** window, click the copy buttons (at the end of each box) to copy the client ID and client secret. Store these in a secure place. To unobscure the client secret, click the eye icon.
5. Click **Close**.

### Lasernet Config Web App

> [!NOTE]
> Note
> 
> The Lasernet Config web app was provided with earlier versions of Lasernet Core. It is a legacy web app and will be deprecated in a future version of Lasernet Core.

**Expand for information**

1. In the **Tools** menu, click **App Registrations**.
2. Click the app registration, then click **Edit**.
3. Click **Reset client secret**. The Lasernet Config app will display a **Client Secret** window that contains the application’s **Client Id** and a new **Client secret**.
4. Click **OK** to close the **Edit App Registration** window.

## Edit an App Registration

To edit an app registration (so that you can select or clear its **Disabled** checkbox or change its **Name** or **Description**), follow these steps.

### Manage

1. In the **System Configuration** menu, click **App Registrations**.
2. Click the app registration that you want to edit. The app registration’s properties pane opens.
3. Edit the properties, then click **Confirm**.

### Lasernet Config Web App

> [!NOTE]
> Note
> 
> The Lasernet Config web app was provided with earlier versions of Lasernet Core. It is a legacy web app and will be deprecated in a future version of Lasernet Core.

**Expand for information**

1. In the **Tools** menu, click **App Registrations**.
2. Click the app registration, then click **Edit**.
3. Change the app registration’s properties.
4. Click **OK** to close the **Edit App Registration** window.

## Delete an App Registration

To delete an app registration, follow these steps.

### Manage

1. In the **System Configuration** menu, click **App Registrations**.
2. On the app registration’s tile, click the menu button (three vertical dots), then click **Delete**.
3. In the confirmation window, click **Confirm**.