API ReferenceTenant Identity

Retrieve Token Delegation for current Org

View as Markdown

Retrieve the registered token exchange callback for the tenant.

User must have authorization role with TENANT_ADMIN suffix in the URL {org}.

The raw clientSecret is never returned; only its SHA-256 hash.

Authentication

AuthorizationBearer
``` export JWT_BEARER_TOKEN="<jwt-bearer-token>" # Example org name: "acme-inc export ORG_NAME=<org-name> # Use the JWT bearer token in your API request auth header: curl -v -X GET -H "Content-Type: application/json" -H "Authorization: Bearer $JWT_BEARER_TOKEN" https://nico-rest-api.nico.svc.cluster.local/v2/org/$ORG_NAME/nico/user/current ```

Path parameters

orgstringRequired
Name of the Org
siteIDstringRequiredformat: "uuid"
ID of the Site

Response

Token delegation retrieved
tokenEndpointstringformat: "uri"
Token endpoint used to exchange delegated Tenant identity tokens
clientSecretBasicobject

Client-secret basic authentication settings for token delegation

subjectTokenAudiencestring
Audience value expected on the subject token
createddatetime

Date/time when the token delegation configuration was created

updateddatetime

Date/time when the token delegation configuration was last updated

Errors

400
Bad Request Error
403
Forbidden Error
404
Not Found Error
500
Internal Server Error
503
Service Unavailable Error