keycloak-scim/authorization_services/topics/hello-world-create-resource-server.adoc

[[_getting_started_hello_world_enabling_authz_services]]
= Enabling authorization services

You can enable authorization services in an existing client application configured to use the OpenID Connect Protocol. You can also create a client using the following procedure.

.Procedure

. Click *Clients* to start creating a client application.

. Fill in the *Client ID*, *Client Protocol*, and *Root URL* fields.
+
.Create client application
image:{project_images}/getting-started/hello-world/create-client.png[alt="Create client application"]

. Click *Save*.
+
The Client Settings page is displayed.

. Select *confidential* in the *Access Type* field and toggle *Authorization Enabled* to *ON*

. Click *Save*.
+
A new *Authorization* tab is displayed for the client.
+
.Client Settings
image:{project_images}/getting-started/hello-world/enable-authz.png[alt="Client Settings"]

. Click the *Authorization* tab.
+
An Authorization Settings page similar to the following is displayed:
+
.Authorization settings
image:{project_images}/getting-started/hello-world/authz-settings.png[alt="Authorization settings"]

When you enable authorization services for a client application, {project_name} automatically creates several default settings for your client authorization configuration.

[role="_additional-resources"]
.Additional resources
* <<_resource_server_enable_authorization, Enabling authorization services>>
* <<_resource_server_default_config, Default configuration>>