---
title: Configuring the server for Android
description: PingOne Advanced Identity Cloud PingAM Android
component: orchsdks
page_id: orchsdks:journey:usage/android/01-configuring-the-server
canonical_url: https://developer.pingidentity.com/orchsdks/journey/usage/android/01-configuring-the-server.html
revdate: Tue, 2 Dec 2025 16:32:08 +0000
section_ids:
  aic: Advanced Identity Cloud
  task_1_create_a_demo_user: Task 1. Create a demo user
  task_2_prepare_for_oauth_2_0_tokens: Task 2. Prepare for OAuth 2.0 tokens
  task_2a_register_a_public_oauth_2_0_client: Task 2a. Register a public OAuth 2.0 client
  task_2b_configure_the_oauth_2_0_provider: Task 2b. Configure the OAuth 2.0 provider
  am: PingAM
  task_1_create_a_demo_user_2: Task 1. Create a demo user
  task_2_prepare_for_oauth_2_0_tokens_2: Task 2. Prepare for OAuth 2.0 tokens
  task_2a_register_a_public_oauth_2_0_client_2: Task 2a. Register a public OAuth 2.0 client
  task_2b_configure_the_oauth_2_0_provider_2: Task 2b. Configure the OAuth 2.0 provider
---

# Configuring the server for Android

[icon: circle-check, set=far]PingOne Advanced Identity Cloud [icon: circle-check, set=far]PingAM [icon: android, set=fab]Android

* **Prepare**

* [Install](02-installing-the-journey-module.html)

* [Configure](03-configuring-the-journey-module.html)

* [Start](04-starting-an-authentication-journey.html)

* [Navigate](05-navigating-an-authentication-journey.html)

* [Manage](06-handling-sessions.html)

To use the **Journey** module in your app you need to complete the prerequisite tasks on your server.

Select your server below and complete the tasks before adding the **Journey** module to your apps:

![](../../../_images/logos/PingOneAICStacked.png)

#### [Advanced Identity Cloud](#aic)

Configure PingOne Advanced Identity Cloud for use with the **Journey** module for Android.

![](../../../_images/logos/PingAM.png)

#### [PingAM](#am)

Configure PingAM for use with the **Journey** module for Android.

## Advanced Identity Cloud

To use the **Journey** module in your app and obtain session tokens for users, complete the following task:

### Task 1. Create a demo user

The samples and tutorials in this documentation often require that you have an identity set up so that you can test authentication.

To create a demo user in PingOne Advanced Identity Cloud, follow these steps:

1. Log in to your PingOne Advanced Identity Cloud tenant.

2. In the left panel, click Identities > Manage.

3. Click [icon: plus, set=fa]New Alpha realm - User.

4. Enter the following details:

   * **Username** = `demo`

   * **First Name** = `Demo`

   * **Last Name** = `User`

   * **Email Address** = `demo.user@example.com`

   * **Password** = `Ch4ng3it!`

5. Click Save.

### Task 2. Prepare for OAuth 2.0 tokens

If you want to optionally obtain access tokens, perform the following prerequisite tasks:

#### Task 2a. Register a public OAuth 2.0 client

Public clients do not use a client secret to obtain tokens because they are unable to keep them hidden. The Orchestration SDKs commonly use this type of client to obtain tokens, as they cannot guarantee safekeeping of the client credentials in a browser or on a mobile device.

To register a *public* OAuth 2.0 client application for use with the SDKs in PingOne Advanced Identity Cloud, follow these steps:

1. Log in to your PingOne Advanced Identity Cloud tenant.

2. In the left panel, click Applications.

3. Click [icon: plus, set=fa]Custom Application.

4. Select OIDC - OpenId Connect as the sign-in method, and then click Next.

5. Select Native / SPA as the application type, and then click Next.

6. In Name, enter a name for the application, such as `Public SDK Client`.

7. In Owners, select a user that is responsible for maintaining the application, and then click Next.

   |   |                                                                                    |
   | - | ---------------------------------------------------------------------------------- |
   |   | When trying out the SDKs, you could select the `demo` user you created previously. |

8. In Client ID, enter `sdkPublicClient`

9. Select **Configure for SDK Sample Apps**.

10. Click Create Application.

    PingOne Advanced Identity Cloud creates the application and displays the details screen.

11. On the Sign On tab:

    1. In Sign-In URLs, ensure the following values appear, or add them if they don't:

       `com.example.demo://oauth2redirect`

       `https://demo.example.com/oauth2redirect`

       |   |                                                             |
       | - | ----------------------------------------------------------- |
       |   | Also add any other domains where you host SDK applications. |

    2. In Grant Types, ensure the following values appear:

       `Authorization Code`

       `Refresh Token`

    3. In Scopes, ensure the following values appear:

       `openid profile email address`

12. Click Show advanced settings, and on the Authentication tab, confirm the following properties:

    1. In Token Endpoint Authentication Method, select `none`.

    2. In Client Type, select `Public`.

    3. Enable the Implied Consent property.

13. Click Save.

The application is now configured to accept client connections from and issue OAuth 2.0 tokens to the example applications and tutorials covered by this documentation.

#### Task 2b. Configure the OAuth 2.0 provider

The provider specifies the supported OAuth 2.0 configuration options for a realm.

To ensure the PingOne Advanced Identity Cloud OAuth 2.0 provider service is configured for use with the Orchestration SDKs, follow these steps:

1. In your PingOne Advanced Identity Cloud tenant, navigate to Native Consoles > Access Management.

2. In the left panel, click [icon: plug, set=fa]Services.

3. In the list of services, click OAuth2 Provider.

4. On the Core tab, ensure Issue Refresh Tokens is enabled.

5. On the Consent tab, ensure Allow Clients to Skip Consent is enabled.

6. Click Save Changes.

## PingAM

To use the **Journey** module in your app and obtain session tokens for users, complete the following task:

### Task 1. Create a demo user

The samples and tutorials in this documentation often require that you have an identity set up so that you can test authentication.

To create a demo user in PingAM, follow these steps:

1. Log in to the PingAM admin UI as an administrator.

2. Navigate to [icon: address-card, set=fa]Identities, and then click [icon: plus, set=fa]Add Identity.

3. Enter the following details:

   * **User ID** = `demo`

   * **Password** = `Ch4ng3it!`

   * **Email Address** = `demo.user@example.com`

4. Click Create.

### Task 2. Prepare for OAuth 2.0 tokens

If you want to optionally obtain access tokens, perform the following prerequisite tasks:

#### Task 2a. Register a public OAuth 2.0 client

Public clients do not use a client secret to obtain tokens because they are unable to keep them hidden. The Orchestration SDKs commonly use this type of client to obtain tokens, as they cannot guarantee safekeeping of the client credentials in a browser or on a mobile device.

To register a *public* OAuth 2.0 client application for use with the SDKs in AM, follow these steps:

1. Log in to the PingAM admin UI as an administrator.

2. Navigate to [icon: list-alt, set=fa]Applications > OAuth 2.0 > Clients, and then click [icon: plus, set=fa]Add Client.

3. In Client ID, enter `sdkPublicClient`.

4. Leave Client secret empty.

5. In Redirection URIs, enter the following values:

   `com.example.demo://oauth2redirect`

   https\://demo.example.com/oauth2redirect

   |   |                                                                        |
   | - | ---------------------------------------------------------------------- |
   |   | Also add any other domains where you will be hosting SDK applications. |

6. In Scopes, enter the following values:

   `openid profile email address`

7. Click Create.

   PingAM creates the new OAuth 2.0 client, and displays the properties for further configuration.

8. On the Core tab:

   1. In Client type, select `Public`.

   2. Disable Allow wildcard ports in redirect URIs.

   3. Click Save Changes.

9. On the Advanced tab:

   1. In Grant Types, enter the following values:

      ```none
      Authorization Code
      Refresh Token
      ```

   2. In Token Endpoint Authentication Method, select `None`.

   3. Enable the Implied consent property.

10. Click Save Changes.

#### Task 2b. Configure the OAuth 2.0 provider

The provider specifies the supported OAuth 2.0 configuration options for a realm.

To ensure the PingAM OAuth 2.0 provider service is configured for use with the Orchestration SDKs, follow these steps:

1. Log in to the PingAM admin UI as an administrator.

2. In the left panel, click [icon: plug, set=fa]Services.

3. In the list of services, click OAuth2 Provider.

4. On the Core tab, ensure Issue Refresh Tokens is enabled.

5. On the Consent tab, ensure Allow Clients to Skip Consent is enabled.

6. Click Save Changes.