About Client ID Metadata Documents (CIMD)

Client ID Metadata Documents (CIMD) let OpenID Connect (OIDC) app integrations identify themselves to Okta using an HTTPS URL instead of an Okta-generated client ID.

A CIMD is a JSON metadata document that an app owner publishes at a reachable HTTPS URL. A CIMD URL serves as an app integration's client ID and its metadata defines its redirect URIs, grant types, and signing keys. In Okta, you can use a CIMD as the authentication method for an app or for an AI agent.

When an Okta admin configures an app to use a CIMD URL, Okta fetches the document at that URL, validates it, and uses it as the client definition instead of an Okta-generated client ID and client credentials. This means admins no longer need to manually register and manage client identities.

When you add a CIMD to an AI agent, it’s also added to the app that’s configured on the User access tab. Likewise, if you add a CIMD to an app that’s configured for user access, it’s also added to the linked AI agent. For more information, see Add AI agents manually.

To configure a new or existing app integration to use a CIMD, see Create OpenID Connect app integrations.

To learn how to register an AI agent with a CIMD using the Okta API, see Register AI agents with a Client ID Metadata Document (CIMD).