Initiate or complete CIBA authentication

Use this endpoint from your backend to initiate or complete Client-Initiated Backchannel Authentication (CIBA), without redirecting the user through your application.

To initiate authentication, provide client_id, scope (including openid), and the applicable claims and login_hint. The response includes an auth_req_id and its validity and polling interval.

To complete an approved request, provide client_id, user_code, and id_token_hint as described by the request schema.

Form Data
string

Your registered client identifier.

Include it in both requests.

string

Space-separated requested scopes. Include openid and request only scopes supported for your client.

Send it with the initial request.

claims
object

JSON object describing the requested claims, including any verified claims.

Include all required claims in the initial request.

string

Preferred user-interface languages, such as en or ka, if supported.

Send with the initial request as needed.

login_hint
object

User identifier JSON object. Send either personal_number or msisdn with the initial request. Only one of the fields should be provided.

string

SMS one-time passcode entered by the user in your application.

Include it in the second request only.

string

Intermediate ID token returned from polling the first request.

Include it in the second request only.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json