The API account needs to be authorized with the OpenID provider. The client application must invoke the following API for OpenID authorization:

• URL :{{HOST}}/oidc-provider/v1/oauth2/authorize

• Operation Type: GET

HeaderParameters:

• scope* - "openid"

• response_type* - "code"

• client_id* - OAuth 2.0 Client Identifier that is generated at the time of API account creation.

• redirect_uri* - Redirection URI to which the response will be sent. This URI MUST exactly match one of the Redirection URI values for the Client pre-registered at the OpenID Provider (for machine clients, always use "apiaccount://callback").

• code_challenge* - This is a 43-128 character long client generated string that needs to be first hashed using SHA-256 and then Base 64 encoded.

• code_challenge_method* - Must be set to "S256".

Sample Request:

{
scope:"openid", 
response_type:"code",
client_id:"<unique client ID of API account>"
redirect_uri:"apiaccount://callback",
state:999,
code_challenge:"<43-128 char length Client generated string which is SHA256 hashed & base 64encoded>",
code_challenge_method:"S256"
}