Generate an authentication token from an OIDC provider in Vultr IAM. Obtain temporary credentials for accessing cloud resources through federated identity.
Creating an OIDC provider token exchanges an authorization code for access and ID tokens using the standard OAuth2 authorization code flow. This is the token endpoint that external systems call after a user completes authentication through the provider's authorization endpoint.
This guide explains how to create an OIDC provider token using the Vultr API.
Send a GET request to the List OIDC Providers endpoint to retrieve all providers.
Note the id of the provider for which you want to create a token.
Send a GET request to the OIDC Provider Discovery endpoint to retrieve the provider's authorization URL. Replace {provider-id} with the provider id.
Note the authorization_endpoint URL from the response. Direct the user to this URL to authenticate. After the user authenticates, the authorization server redirects to the configured redirect_uri with an authorization code.
Send a POST request to the Create OIDC Provider Token endpoint to exchange the authorization code for tokens. Replace {provider-id} with the provider id, AUTH-CODE with the authorization code, and REDIRECT-URI with the redirect URI configured for the client.
A successful request returns an HTTP 201 Created response.
0 Comments
Be the first to comment and share your perspective with the community.