{{!
  Copyright IBM Corp. 2016, 2025
  SPDX-License-Identifier: BUSL-1.1
}}

<div class="box is-fullwidth is-shadowless" data-test-oidc-landing>
  <p>
    <b>Step 1:</b>
    Create an application, and obtain the client ID, client secret and issuer URL.
  </p>
  <p>
    <b>Step 2:</b>
    Set up a new auth method for Vault with the client application.
  </p>
</div>

<div class="box is-fullwidth is-shadowless">
  <img
    data-test-oidc-img
    src={{img-path "~/oidc-landing.png"}}
    alt="Example flow of a user logging in to an application, which redirects them to the Vault U-I for authentication. Vault displays an auth method selection form and forwards the user to an upstream identity provider (like A-W-S, Okta, or Microsoft) for final credential verification."
  />
</div>