# Identity Provider Client Secret (per route)

## Summary

When set, **Identity Provider Client Secret (per route)** overrides the value of [idp\_client\_secret](https://www.pomerium.com/docs/reference/identity-provider-settings.md#identity-provider-client-secret) set globally for this route.

## How to configure

**Core:**

| **YAML**/**JSON** setting | **Type** | **Usage**    |
| :------------------------ | :------- | :----------- |
| `idp_client_secret`       | `string` | **optional** |

### Examples

```yaml
routes:
  - from: https://verify.localhost.pomerium.io
    to: http://verify:8000
    idp_client_secret: idp_client_secret
```

**Enterprise:**

**Kubernetes:**

The `idp_client_secret` can be set via a reference to a secret with a `client_secret` key:

| **[Annotation name](https://www.pomerium.com/docs/deploy/k8s/ingress.md#set-ingress-annotations)** | **Type** | **Usage** |
| :-- | :-- | :-- |
| `identity_provider_secret` | name of a Kubernetes secret | **optional** |

```yaml
ingress.pomerium.io/identity_provider_secret: idp-secret
```

```yaml
apiVersion: v1
kind: Secret
metadata:
  name: idp-secret
data:
  client_secret: ...
```