---
title: Creating attributes for the <code>client_id</code>, <code>client_secret</code>, and active token
description: Create the attributes you'll reference in the access token validation policy.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_creating_attributes
canonical_url: https://docs.pingidentity.com/pingaccess/9.1/pingaccess_user_interface_reference_guide/pa_creating_attributes.html
revdate: December 6, 2024
superseded_by: https://docs.pingidentity.com/pingaccess/9.1/pingaccess_user_interface_reference_guide/pa_creating_attributes.html
section_ids:
  steps: Steps
  next-steps: Next steps
---

# Creating attributes for the `client_id`, `client_secret`, and active token

Create the attributes you'll reference in the access token validation policy.

## Steps

1. In the PingAuthorize administrative console, go to **Trust Framework > Attributes**.

2. In the **PingFed Client** section, create a `client_id` attribute:

   1. In the **Parent** list, select **PingFed Client**.

   2. In the **Value Settings** section:

      1. Select the **Default Value** checkbox and enter the client ID from the OAuth resource server that you want to use to validate the token in the field.

         For example, **authroize\_rs**.

      2. In the **Type** list, select **String**.

   3. In the **Caching** section:

      1. In the **Cache Strategy** list, select **No Caching**.

3. In the **PingFed Client** section, create a `client_secret` attribute.

   1. In the **Parent** list, select **PingFed Client**.

   2. In the **Value Settings** section:

      1. Select the **Default Value** checkbox and enter the corresponding client secret from the OAuth resource server that you want to use to validate the token in the field.

      2. In the **Type** list, select **String**.

   3. In the **Caching** section:

      1. In the **Cache Strategy** list, select **No Caching**.

4. Go to the **SCIM2** section, and create a `TokenActive` attribute to resolve the `PingFederate Introspection` service:

   1. In the **Resolvers** section:

      1. In the **Resolver type** list, select **Service**, then select **PingFederate introspection**.

   2. In the **Value Settings** section:

      1. In the **Type** list, select **Boolean**.

   3. In the **Caching** section:

      1. In the **Cache Strategy** list, select **No Caching**.

## Next steps

[Create a policy to validate the access token](#).