ApplicationServicev2Beta Can't set ApplicationID when OIDC type

solthor · 2025-11-26T08:55:47.974Z

Hey, is there a bug related to creating an application via applicationServicev2beta (go sdk) and applicationID? I'm seeing that I can create an application which is api and then the applicaitonID is what I set it to, if i use application OIDC I don't get to set it and get a generated application ID back Steps to produce: 1. create application with type API with custom application id, Get it back through application id 2. create a new application with type OIDC with custom application id, Get it back through generated application id In zitadel ui, the application created from #1 is my custom id, the application created from #2 is the generated application id

A

Ask Inkeep•11/26/25, 8:55 AM

Hi @solthor, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.

A

Ask Inkeep•11/26/25, 8:56 AM

Answer

I wasn't able to find a direct answer about this specific behavior difference between API and OIDC application types when setting a custom

applicationId

applicationId

applicationId

applicationId in the ApplicationService v2 API. Here are some relevant sources:

CreateApplication (1) : Documents the v2 CreateApplication endpoint which accepts an
```
applicationId
```
applicationId
```
applicationId
```
applicationId
parameter in the request body for both API and OIDC configurations.
Create Application (OIDC) (2) : Documents the deprecated v1 management API endpoint which generates the client ID automatically for OIDC applications.

The behavior you're describing—where API applications respect your custom

applicationId

applicationId

applicationId

applicationId but OIDC applications generate their own—isn't explicitly documented in the available sources. This could indicate a bug or undocumented behavior difference between application types in the v2 API.

Would you like me to provide a general answer based on my knowledge, or would you prefer to click the "Ask for help" button to tag a team member who can investigate this specific issue with the Go SDK?

A

Ask Inkeep•11/26/25, 8:56 AM

To learn more, see the sources I considered:

[1] CreateApplication
[2] Create Application (OIDC)

A

Ask Inkeep•11/26/25, 8:56 AM

Feel free to tag @Ask Inkeep with additional questions.

AAsk Inkeep To learn more, see the sources I considered: [[1] CreateApplication](https://...

A

Ask InkeepAPP•11/26/25, 8:56 AM

Got it. Tagging @Rajat for additional help.

S

solthorOP•11/26/25, 8:56 AM

It doesn't seem to be go-sdk related

S

solthorOP•11/26/25, 9:01 AM

zitadel v4.7.0
github.com/zitadel/zitadel-go/v3 v3.18.1

S

solthorOP•11/26/25, 9:52 AM

tested with samlApp also, that seems to also omit the applicationID and generate an ID for us

R

Rajat•11/26/25, 10:06 AM

hey @solthor thanks for your question, I will test this behaviour and will get back to you.

S

solthorOP•11/27/25, 7:33 AM

@Rajat pingpong, also I'm wondering why we can't set the clientid when creating a native, devicecode where we set none for the authorization_method. The client id could then be used staticly in code as part of a self-made cli.

S

solthorOP•11/27/25, 7:34 AM

Given that we have a bootstrapper for zitadel setting these values.

R

Rajat•11/27/25, 11:01 AM

hey @solthor do you know if you are using login v1 or v2?.

S

solthorOP•11/27/25, 11:02 AM

loginv2, but doesn't the go-sdk go straight towards the api of the zitadel server anyways (through grpc)

R

Rajat Singh•11/28/25, 9:38 AM

You're right, I should've known that

please allow me sometime and I'll get back to you

R

Rajat•11/28/25, 11:09 AM

hey @solthor could you pls share your code snippet with me?. Thanks

S

solthorOP•12/1/25, 8:26 AM

imports for application creation:

    "github.com/zitadel/zitadel-
go/v3/pkg/client"
    app "github.com/zitadel/zitadel-go/v3/pkg/client/zitadel/application/v2"

    "github.com/zitadel/zitadel-
go/v3/pkg/client"
    app "github.com/zitadel/zitadel-go/v3/pkg/client/zitadel/application/v2"

    "github.com/zitadel/zitadel-
go/v3/pkg/client"
    app "github.com/zitadel/zitadel-go/v3/pkg/client/zitadel/application/v2"

    "github.com/zitadel/zitadel-
go/v3/pkg/client"
    app "github.com/zitadel/zitadel-go/v3/pkg/client/zitadel/application/v2"

creation of application where applicationId is not respected:

addAppResponse, createErr := apiClient.ApplicationServiceV2().CreateApplication(ctx, &app.CreateApplicationRequest{
        ProjectId:     projectID,
        Name:          applicationName,
        ApplicationId: applicationID,
        ApplicationType: &app.CreateApplicationRequest_OidcConfiguration{
            OidcConfiguration: &app.CreateOIDCApplicationRequest{
                GrantTypes: []app.OIDCGrantType{app.OIDCGrantType_OIDC_GRANT_TYPE_DEVICE_CODE},
                ResponseTypes: []app.OIDCResponseType{
                    app.OIDCResponseType_OIDC_RESPONSE_TYPE_CODE,
                },
                ApplicationType: app.OIDCApplicationType_OIDC_APP_TYPE_NATIVE,
                AuthMethodType:  app.OIDCAuthMethodType_OIDC_AUTH_METHOD_TYPE_NONE,
                AccessTokenType: app.OIDCTokenType_OIDC_TOKEN_TYPE_BEARER,
            },
        },
    })

addAppResponse, createErr := apiClient.ApplicationServiceV2().CreateApplication(ctx, &app.CreateApplicationRequest{
        ProjectId:     projectID,
        Name:          applicationName,
        ApplicationId: applicationID,
        ApplicationType: &app.CreateApplicationRequest_OidcConfiguration{
            OidcConfiguration: &app.CreateOIDCApplicationRequest{
                GrantTypes: []app.OIDCGrantType{app.OIDCGrantType_OIDC_GRANT_TYPE_DEVICE_CODE},
                ResponseTypes: []app.OIDCResponseType{
                    app.OIDCResponseType_OIDC_RESPONSE_TYPE_CODE,
                },
                ApplicationType: app.OIDCApplicationType_OIDC_APP_TYPE_NATIVE,
                AuthMethodType:  app.OIDCAuthMethodType_OIDC_AUTH_METHOD_TYPE_NONE,
                AccessTokenType: app.OIDCTokenType_OIDC_TOKEN_TYPE_BEARER,
            },
        },
    })

addAppResponse, createErr := apiClient.ApplicationServiceV2().CreateApplication(ctx, &app.CreateApplicationRequest{
        ProjectId:     projectID,
        Name:          applicationName,
        ApplicationId: applicationID,
        ApplicationType: &app.CreateApplicationRequest_OidcConfiguration{
            OidcConfiguration: &app.CreateOIDCApplicationRequest{
                GrantTypes: []app.OIDCGrantType{app.OIDCGrantType_OIDC_GRANT_TYPE_DEVICE_CODE},
                ResponseTypes: []app.OIDCResponseType{
                    app.OIDCResponseType_OIDC_RESPONSE_TYPE_CODE,
                },
                ApplicationType: app.OIDCApplicationType_OIDC_APP_TYPE_NATIVE,
                AuthMethodType:  app.OIDCAuthMethodType_OIDC_AUTH_METHOD_TYPE_NONE,
                AccessTokenType: app.OIDCTokenType_OIDC_TOKEN_TYPE_BEARER,
            },
        },
    })

addAppResponse, createErr := apiClient.ApplicationServiceV2().CreateApplication(ctx, &app.CreateApplicationRequest{
        ProjectId:     projectID,
        Name:          applicationName,
        ApplicationId: applicationID,
        ApplicationType: &app.CreateApplicationRequest_OidcConfiguration{
            OidcConfiguration: &app.CreateOIDCApplicationRequest{
                GrantTypes: []app.OIDCGrantType{app.OIDCGrantType_OIDC_GRANT_TYPE_DEVICE_CODE},
                ResponseTypes: []app.OIDCResponseType{
                    app.OIDCResponseType_OIDC_RESPONSE_TYPE_CODE,
                },
                ApplicationType: app.OIDCApplicationType_OIDC_APP_TYPE_NATIVE,
                AuthMethodType:  app.OIDCAuthMethodType_OIDC_AUTH_METHOD_TYPE_NONE,
                AccessTokenType: app.OIDCTokenType_OIDC_TOKEN_TYPE_BEARER,
            },
        },
    })

S

solthorOP•12/1/25, 8:29 AM

apiClient creation:

authOption := client.DefaultServiceUserAuthentication(
        q.KeyPath,
        oidc.ScopeOpenID,
        client.ScopeZitadelAPI(),
    )

    if q.Domain == "localhost" {
        slog.Warn("connecting to ZITADEL on localhost, make sure this is intended and not a misconfiguration")
        return client.New(ctx, zitadel.New(q.Domain, zitadel.WithInsecureSkipVerifyTLS(), zitadel.WithInsecure("8080")), client.WithAuth(authOption))
    }

    return client.New(ctx, zitadel.New(q.Domain), client.WithAuth(authOption))

authOption := client.DefaultServiceUserAuthentication(
        q.KeyPath,
        oidc.ScopeOpenID,
        client.ScopeZitadelAPI(),
    )

    if q.Domain == "localhost" {
        slog.Warn("connecting to ZITADEL on localhost, make sure this is intended and not a misconfiguration")
        return client.New(ctx, zitadel.New(q.Domain, zitadel.WithInsecureSkipVerifyTLS(), zitadel.WithInsecure("8080")), client.WithAuth(authOption))
    }

    return client.New(ctx, zitadel.New(q.Domain), client.WithAuth(authOption))

authOption := client.DefaultServiceUserAuthentication(
        q.KeyPath,
        oidc.ScopeOpenID,
        client.ScopeZitadelAPI(),
    )

    if q.Domain == "localhost" {
        slog.Warn("connecting to ZITADEL on localhost, make sure this is intended and not a misconfiguration")
        return client.New(ctx, zitadel.New(q.Domain, zitadel.WithInsecureSkipVerifyTLS(), zitadel.WithInsecure("8080")), client.WithAuth(authOption))
    }

    return client.New(ctx, zitadel.New(q.Domain), client.WithAuth(authOption))

authOption := client.DefaultServiceUserAuthentication(
        q.KeyPath,
        oidc.ScopeOpenID,
        client.ScopeZitadelAPI(),
    )

    if q.Domain == "localhost" {
        slog.Warn("connecting to ZITADEL on localhost, make sure this is intended and not a misconfiguration")
        return client.New(ctx, zitadel.New(q.Domain, zitadel.WithInsecureSkipVerifyTLS(), zitadel.WithInsecure("8080")), client.WithAuth(authOption))
    }

    return client.New(ctx, zitadel.New(q.Domain), client.WithAuth(authOption))

S

solthorOP•12/1/25, 8:29 AM

imports for client creation:

   "github.com/zitadel/zitadel-go/v3/pkg/client"
    "github.com/zitadel/zitadel-go/v3/pkg/zitadel"

   "github.com/zitadel/zitadel-go/v3/pkg/client"
    "github.com/zitadel/zitadel-go/v3/pkg/zitadel"

   "github.com/zitadel/zitadel-go/v3/pkg/client"
    "github.com/zitadel/zitadel-go/v3/pkg/zitadel"

   "github.com/zitadel/zitadel-go/v3/pkg/client"
    "github.com/zitadel/zitadel-go/v3/pkg/zitadel"

S

solthorOP•12/1/25, 8:43 AM

I wish for a possibility to set the client id in this protobuf such that we can create a device code oidc app with pre-defined clientid

S

solthorOP•12/1/25, 8:44 AM

This such that we can have a cli with zitadel-login not needing users to download new versions because of some client-id have changed due to bootstrapping or similar.

R

Rajat Singh•12/1/25, 11:51 AM

@Mridang Agarwalla

S

solthorOP•12/2/25, 6:39 AM

The title says ApplicationServicev2Beta, but I've tried both the Beta and the ApplicationServicev2 - neither of them respect setting ApplicationID when choosing OIDC or SAML applications, they both automatically generate ApplicationID's.