Skip to main content

Obtain a bearer token

POST 
/auth/token

Authenticate and obtain a bearer token. Two credential delivery methods are supported:

Option A — HTTP Basic authentication (Postman, custom integrations)

Provide your rp|estab combination and shared secret as a Basic Authorization header:

Authorization: Basic <base64(rp|estab:sharedSecret)>

Option B — OAuth 2.0 client credentials in request body (Microsoft Entra ID, Okta, and other IdP SCIM connectors)

Omit the Authorization header and send client_id and client_secret as application/x-www-form-urlencoded body parameters. Set client_id to your rp|estab value and client_secret to your shared secret.

On success, cache the access_token and reuse it until expires_in seconds have elapsed.

Request​

Responses​

Token issued successfully