---
title: Creating an access token manager
description: Create an access token to grant access and control access parameters. This sample configuration uses an instance of the Access Token Manager (ATM) using the Internally Managed Reference Tokens data model.
component: pingaccess
version: 9.0
page_id: pingaccess:token_providers:pa_creating_an_access_token_manager
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/token_providers/pa_creating_an_access_token_manager.html
revdate: February 6, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  next-steps: Next steps
---

# Creating an access token manager

Create an access token to grant access and control access parameters. This sample configuration uses an instance of the Access Token Manager (ATM) using the Internally Managed Reference Tokens data model.

## About this task

For more information, see OAuth [Access token management](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_access_token_management.html).

## Steps

1. Go to **Applications → OAuth → Access Token Management**.

2. Click **Create New Instance**.

3. In the **Instance Name** field, enter an instance name of your choosing.

   For example, `General Access Token`.

4. In the **Instance ID** field, enter an instance ID of your choosing.

   For example, `GeneralAccessToken`.

5. From the **Type** list, select **Internally Managed Reference Tokens**.

6. Click **Next** until the **Access Token Attribute Contract** tab is displayed.

7. In the **Extend the Contract** field, enter `UserName`, and then click **Add**.

8. Click **Next** until the **Summary** tab is displayed. Click **Save**.

## Next steps

[Configure an IdP adapter mapping](pa_configuring_an_idp_adapter_mapping.html).