---
title: Form parameters (HTTP POST)
description: The OAuth 2.0 client authenticates by sending client_id and client_secret form parameters in an HTTP POST request:
component: pingam
version: 7.3
page_id: pingam:oauth2-guide:client-auth-form
canonical_url: https://docs.pingidentity.com/pingam/8.1/am-oauth2/client-auth-form.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
keywords: ["Authentication", "OAuth 2.0", "Federation", "HTTP", "Clients"]
---

# Form parameters (HTTP POST)

The OAuth 2.0 client authenticates by sending `client_id` and `client_secret` form parameters in an HTTP POST request:

```bash
$ curl \
--request POST \
--data "client_id=myClient" \
--data "client_secret=forgerock" \
…​
```

To use this authentication method for a confidential OAuth 2.0 client, edit the client profile in the AM admin UI:

1. Go to Realms > *Realm Name* > Applications > OAuth 2.0 > Clients > *Client ID* > Advanced.

2. Set the Token Endpoint Authentication Method to `client_secret_post` and save your work.

Make sure all connections to AM use HTTPS to protect the secret.