# Configure an Aembit Access Token Credential Provider

> How to create and use an Aembit Access Token Credential Provider

The Aembit Access Token Credential Provider generates access tokens for authenticating applications and services to the Aembit API.

## Create an Aembit Access Token Credential Provider

To configure an Aembit Access Token Credential Provider, follow these steps.

1. Log into your Aembit Tenant.

2. In the left sidebar, click **Credential Providers**.

   ![Credential Providers Main Page - Empty](/_astro/credential_providers_main_page_empty.BTUxwZGj_ZknLOA.webp)

3. Click **+ New** to open the Credential Providers dialog window.

   ![Credential Providers - Dialog Window Empty](/_astro/credential_providers_aembit_access_token_dialog_window_empty.BrudMcBU_2vndmo.webp)

4. In the Credential Providers dialog window, enter the following information:

   * **Name** - Name of the Credential Provider.

   * **Description** - An optional text description of the Credential Provider.

   * **Credential Type** - A dropdown menu that enables you to configure the Credential Provider type. Select **Aembit Access Token**.

   * **Audience** - Auto-generated by Aembit, this is a specific endpoint used for authentication within the Aembit API.

   * **Lifetime** - The duration for which the generated access token remains valid.

5. (Optional) To enable refresh token support, toggle **Enable Refresh Token Support** to on.

   When enabled, the [MCP Authorization Server](/ai-guide/mcp/authorization-server/concepts-mcp-auth-server/#token-refresh) can return refresh tokens alongside access tokens during OAuth token requests. Refresh tokens are single-use, and each exchange returns a new refresh token. This option only applies to MCP Authorization Server flows.

   Set the **Absolute Token Lifetime** to control how long refresh tokens remain valid for exchanging for new access tokens after initial issuance. This value must be greater than the **Lifetime** value. The absolute token lifetime doesn’t reset with each refresh token exchange. Once it expires, the client must complete a new authorization flow.

   ![Credential Provider Dialog Window](/_astro/credential_providers_aembit_access_token_dialog_window_completed.Dg4LCXyF_ZjXFKz.webp)

6. Click **Save**.

   ![Credential Providers Page With New Aembit Access Token Credential Provider](/_astro/credential_providers_aembit_access_token_main_page_with_new_credential_provider.CjULmXI6_1c3tiq.webp)