Initiate CIBA backchannel authentication.

post

https://{tenanturl}/oauth2/ciba

Use this API to initiate a Client-Initiated Backchannel Authentication (CIBA) flow. The client submits a backchannel authentication request and obtains an auth_req_id, which can later be exchanged for an access token.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Request body

client_id

string

The OIDC client ID that is required when the basic authorization header is not set.

client_secret

string

The OIDC client secret that is required when the basic authorization header is not set and the client is not a public client.

client_assertion

string

The JWT assertion being used to authenticate the client.

client_assertion_type

string

enum

The format of client assertion.

Allowed:

scope

string

Space-separated list of requested OAuth 2.0 scopes.

login_hint

string

A hint to identify the end-user (e.g. email address or username).

id_token_hint

string

An ID token previously issued to the client, as a hint about the end-user.

binding_message

string

A human-readable message to be displayed on both the consumption and authentication devices to interlock them.

requested_expiry

integer

Requested expiry in seconds for the auth_req_id.

authorization_details

array

The JSON array of JSON objects representing fine-grained permission.

authorization_details

Responses

200

The backchannel authentication request was accepted.

400

The request was invalid.

401

Client authentication failed.

500

An internal server error occurred.

Language

URL

Loading…