> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.id.me/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.id.me/_mcp/server.

# Overview

> Overview of the available configurations

Explore our available policy configurations to enable access to the ID.me Digital Wallet, Credential Broker, and Attribute Exchange.
You can also review the standard OAuth/OIDC scope values and SAML AuthnContext values used by applications to request specific user data.
These policies are designed to simplify and secure your integration process.

## Applications

Application configurations define how your application behaves, from user experience settings like language and session duration to security
controls such as token expiration and authorization rules. Proper configuration is key to delivering a seamless user experience while
maintaining performance, security, and compliance.

#### [Redirect URIs](/integrations/configurations/applications/redirect-ur-is)

OAuth 2.0 and OpenID Connect integrations require a configured redirect_uri, which must be passed to the authorization endpoint to initiate the authentication flow

#### [Language localization](/integrations/configurations/applications/language-localization)

Developers are encouraged to implement localization in their applications, allowing users to complete verification in their preferred language

#### [Privacy policy and terms of service](/integrations/configurations/applications/privacy-terms-of-service)

Streamline experiences by allowing users to opt in to your company's privacy policy and terms of service during the consent process

#### [Authorization duration](/integrations/configurations/applications/authorization-duration)

Critical for balancing security and user convenience, authorization duration defines how long granted access remains valid

#### [Token expiration](/integrations/configurations/applications/token-expiration)

A time-based mechanism that limits how long a token remains valid and reduces the risk of unauthorized access

#### [Session length](/integrations/configurations/applications/session-length)

Session length, or session timeout, defines how long a member's session remains active after they sign in

## Policies

Policy configurations are essential for managing your application. They define rules and settings that control user access,
security measures, multi-factor authentication options, user attributes, and guidance URLs. Proper policy configurations help
you maintain precise control, ensuring both robust security and a smooth user experience.

#### [Multi-factor authentication options](/integrations/configurations/policies/mfa-options)

Add layers of security beyond passwords to help confirm a user's identity

#### [User properties](/integrations/configurations/policies/user-properties)

Learn how to use the verified user payload to enhance your application and customize the user experience

#### [FAQ and return URLs](/integrations/configurations/policies/faq-return-ur-ls)

Learn how to add custom FAQ and return links to guide users during verification and drive them back to your application

## Standard OAuth, OIDC, and SAML AuthN context values

#### [Scope and context values](/integrations/configurations/configuration-standards)

Learn how scopes and AuthnContext values define access levels and authentication requirements to ensure data security and user trust