Exchange token

Exchanges a third-party JWT for an Cortex SSO access token.

The request is submitted as application/x-www-form-urlencoded. The token field carries the JWT to exchange — it is not sent in an Authorization header. The token's signature is verified using the secret or JWKS configured for the supplied clientId, so the endpoint requires no separate authentication of its own.

If no mapping exists between the token's subject and a Cortex SSO user, one is created and the user is provisioned by email; otherwise the existing mapping is used to issue a token for the known user.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Form Data
string
required

The third-party JWT to exchange. Verified against the secret or JWKS configured for the client.

uuid
required

Identifier of the device making the request. Must be a valid UUID.

string
required

Identifier of the configured client the token belongs to.

string

Identity provider to disambiguate between multiple configurations sharing the same clientId. Defaults to the standard provider when omitted.

string

Source recorded against the user when a new account is provisioned.

string

Registration type recorded against the user when a new account is provisioned.

string

Platform recorded against the user when a new account is provisioned.

Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json