API security
Confidential Client
A confidential client is a client application capable of keeping its own credentials protected during token acquisition.
Definition
A confidential client is a client component that can securely hold authentication material used to identify itself to the authorization server. It is typically used in server-side or controlled runtime environments rather than uncontrolled public endpoints.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.