Create OAuth Client
POSThttps://sailpoint.api.identitynow.com/beta/oauth-clients
This creates an OAuth client.
Request
- application/json
Bodyrequired
The name of the business the API Client should belong to
Acme-Solar
The homepage URL associated with the owner of the API Client
http://localhost:12345
A human-readable name for the API Client
Demo API Client
A description of the API Client
An API client used for the authorization_code, refresh_token, and client_credentials flows
The number of seconds an access token generated for this API Client is valid for
750
The number of seconds a refresh token generated for this API Client is valid for
86400
A list of the approved redirect URIs. Provide one or more URIs when assigning the AUTHORIZATION_CODE grant type to a new OAuth Client.
["http://localhost:12345","http://localhost:67890"]
A list of OAuth 2.0 grant types this API Client can be used with
Possible values: [CLIENT_CREDENTIALS
, AUTHORIZATION_CODE
, REFRESH_TOKEN
]
["AUTHORIZATION_CODE","CLIENT_CREDENTIALS","REFRESH_TOKEN"]
Access type of API Client indicating online or offline use
Possible values: [ONLINE
, OFFLINE
]
OFFLINE
Type of an API Client indicating public or confidentials use
Possible values: [CONFIDENTIAL
, PUBLIC
]
CONFIDENTIAL
An indicator of whether the API Client can be used for requests internal within the product.
false
An indicator of whether the API Client is enabled for use
true
An indicator of whether the API Client supports strong authentication
false
An indicator of whether the API Client supports the serialization of SAML claims when used with the authorization_code flow
false
Scopes of the API Client. If no scope is specified, the client will be created with the default scope "sp:scopes:all". This means the API Client will have all the rights of the owner who created it.
["demo:api-client-scope:first","demo:api-client-scope:second"]
Responses
- 200
- 400
- 401
- 403
- 429
- 500
Request succeeded.
- application/json
- Schema
- Example (auto)
Schema
ID of the OAuth client
2c9180835d2e5168015d32f890ca1581
Secret of the OAuth client (This field is only returned on the intial create call.)
5c32dd9b21adb51c77794d46e71de117a1d0ddb36a7ff941fa28014ab7de2cf3
The name of the business the API Client should belong to
Acme-Solar
The homepage URL associated with the owner of the API Client
http://localhost:12345
A human-readable name for the API Client
Demo API Client
A description of the API Client
An API client used for the authorization_code, refresh_token, and client_credentials flows
The number of seconds an access token generated for this API Client is valid for
750
The number of seconds a refresh token generated for this API Client is valid for
86400
A list of the approved redirect URIs used with the authorization_code flow
["http://localhost:12345"]
A list of OAuth 2.0 grant types this API Client can be used with
Possible values: [CLIENT_CREDENTIALS
, AUTHORIZATION_CODE
, REFRESH_TOKEN
]
["AUTHORIZATION_CODE","CLIENT_CREDENTIALS","REFRESH_TOKEN"]
Access type of API Client indicating online or offline use
Possible values: [ONLINE
, OFFLINE
]
OFFLINE
Type of an API Client indicating public or confidentials use
Possible values: [CONFIDENTIAL
, PUBLIC
]
CONFIDENTIAL
An indicator of whether the API Client can be used for requests internal to IDN
false
An indicator of whether the API Client is enabled for use
true
An indicator of whether the API Client supports strong authentication
false
An indicator of whether the API Client supports the serialization of SAML claims when used with the authorization_code flow
false
The date and time, down to the millisecond, when the API Client was created
2017-07-11T18:45:37.098Z
The date and time, down to the millisecond, when the API Client was last updated
2018-06-25T20:22:28.104Z
Scopes of the API Client.
["demo:api-client-scope:first","demo:api-client-scope:second"]
{
"id": "2c9180835d2e5168015d32f890ca1581",
"secret": "5c32dd9b21adb51c77794d46e71de117a1d0ddb36a7ff941fa28014ab7de2cf3",
"businessName": "Acme-Solar",
"homepageUrl": "http://localhost:12345",
"name": "Demo API Client",
"description": "An API client used for the authorization_code, refresh_token, and client_credentials flows",
"accessTokenValiditySeconds": 750,
"refreshTokenValiditySeconds": 86400,
"redirectUris": [
"http://localhost:12345"
],
"grantTypes": [
"AUTHORIZATION_CODE",
"CLIENT_CREDENTIALS",
"REFRESH_TOKEN"
],
"accessType": "OFFLINE",
"type": "CONFIDENTIAL",
"internal": false,
"enabled": true,
"strongAuthSupported": false,
"claimsSupported": false,
"created": "2017-07-11T18:45:37.098Z",
"modified": "2018-06-25T20:22:28.104Z",
"scope": [
"demo:api-client-scope:first",
"demo:api-client-scope:second"
]
}
Client Error - Returned if the request body is invalid.
- application/json
- Schema
- Example (auto)
Schema
Fine-grained error code providing more detail of the error.
400.1 Bad Request Content
Unique tracking id for the error.
e7eab60924f64aa284175b9fa3309599
messages object[]
causes object[]
{
"detailCode": "400.1 Bad Request Content",
"trackingId": "e7eab60924f64aa284175b9fa3309599",
"messages": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
],
"causes": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
]
}
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.
- application/json
- Schema
- Example (auto)
Schema
A message describing the error
JWT validation failed: JWT is expired
{
"error": "JWT validation failed: JWT is expired"
}
Forbidden - Returned if the user you are running as, doesn't have access to this end-point.
- application/json
- Schema
- Example (auto)
- 403
Schema
Fine-grained error code providing more detail of the error.
400.1 Bad Request Content
Unique tracking id for the error.
e7eab60924f64aa284175b9fa3309599
messages object[]
causes object[]
{
"detailCode": "400.1 Bad Request Content",
"trackingId": "e7eab60924f64aa284175b9fa3309599",
"messages": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
],
"causes": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
]
}
An example of a 403 response object
{
"detailCode": "403 Forbidden",
"trackingId": "b21b1f7ce4da4d639f2c62a57171b427",
"messages": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The server understood the request but refuses to authorize it."
}
]
}
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.
- application/json
- Schema
- Example (auto)
Schema
A message describing the error
Rate Limit Exceeded
{
"message": " Rate Limit Exceeded "
}
Internal Server Error - Returned if there is an unexpected error.
- application/json
- Schema
- Example (auto)
- 500
Schema
Fine-grained error code providing more detail of the error.
400.1 Bad Request Content
Unique tracking id for the error.
e7eab60924f64aa284175b9fa3309599
messages object[]
causes object[]
{
"detailCode": "400.1 Bad Request Content",
"trackingId": "e7eab60924f64aa284175b9fa3309599",
"messages": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
],
"causes": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "The request was syntactically correct but its content is semantically invalid."
}
]
}
An example of a 500 response object
{
"detailCode": "500.0 Internal Fault",
"trackingId": "b21b1f7ce4da4d639f2c62a57171b427",
"messages": [
{
"locale": "en-US",
"localeOrigin": "DEFAULT",
"text": "An internal fault occurred."
}
]
}
Authorization: oauth2
type: Personal Access Tokenscopes: sp:oauth-client:manage
- go
- powershellSailPoint SDK
- pythonSailPoint SDK
- csharp
- curl
- dart
- http
- java
- javascript
- kotlin
- c
- nodejs
- objective-c
- ocaml
- php
- r
- ruby
- rust
- shell
- swift
- NATIVE