Create a token exchange profile

Create a new Token Exchange Profile within your tenant.

By using this feature, you agree to the applicable Free Trial terms in Okta’s Master Subscription Agreement. It is your responsibility to securely validate the user’s subject_token. See User Guide for more details.

POST https://{tenantDomain}/api/v2/token-exchange-profiles

C#

C#

using Auth0.ManagementApi;
using System.Threading.Tasks;

public partial class Examples
{
    public async Task Example() {
        var client = new ManagementApiClient(
            token: "<token>",
            clientOptions: new ClientOptions { BaseUrl = "https://{YOUR_DOMAIN}/api/v2" }
        );

        await client.TokenExchangeProfiles.CreateAsync(
            new CreateTokenExchangeProfileRequestContent {
                Name = "name",
                SubjectTokenType = "subject_token_type",
                ActionId = "action_id",
                Type = "custom_authentication"
            }
        );
    }

}

package example

import (
    context "context"

    management "github.com/auth0/go-auth0/v2/management"
    client "github.com/auth0/go-auth0/v2/management/client"
    option "github.com/auth0/go-auth0/v2/management/option"
)

func do() {
    mgmt, err := client.New(
        "{YOUR_DOMAIN}",
        option.WithToken(
            "<token>",
        ),
    )
    if err != nil {
        return
    }
    request := &management.CreateTokenExchangeProfileRequestContent{
        Name: "name",
        SubjectTokenType: "subject_token_type",
        ActionId: "action_id",
        Type: management.TokenExchangeProfileTypeEnum(
            "custom_authentication",
        ),
    }
    mgmt.TokenExchangeProfiles.Create(
        context.TODO(),
        request,
    )
}

package com.example.usage;

import com.auth0.client.mgmt.ManagementApi;
import com.auth0.client.mgmt.types.CreateTokenExchangeProfileRequestContent;

public class Example {
    public static void main(String[] args) {
        ManagementApi client = ManagementApi
            .builder()
            .domain("{YOUR_DOMAIN}")
            .token("<token>")
            .build();

        client.tokenExchangeProfiles().create(
            CreateTokenExchangeProfileRequestContent
                .builder()
                .name("name")
                .subjectTokenType("subject_token_type")
                .actionId("action_id")
                .type("custom_authentication")
                .build()
        );
    }
}

<?php

namespace Example;

use Auth0\SDK\API\Management\Wrapper\ManagementClient;
use Auth0\SDK\API\Management\Wrapper\ManagementClientOptions;
use Auth0\SDK\API\Management\TokenExchangeProfiles\Requests\CreateTokenExchangeProfileRequestContent;

$client = new ManagementClient(new ManagementClientOptions(
    domain: '{YOUR_DOMAIN}',
    token: '<token>',
));
$client->tokenExchangeProfiles->create(
    new CreateTokenExchangeProfileRequestContent([
        'name' => 'name',
        'subjectTokenType' => 'subject_token_type',
        'actionId' => 'action_id',
        'type' => 'custom_authentication',
    ]),
);

from auth0.management import ManagementClient

client = ManagementClient(
    domain="{YOUR_DOMAIN}",
    token="<token>",
)

client.token_exchange_profiles.create(
    name="name",
    subject_token_type="subject_token_type",
    action_id="action_id",
)

require "auth0"

client = Auth0::Management.new(token: "<token>", base_url: "https://{YOUR_DOMAIN}/api/v2")

client.token_exchange_profiles.create(
  name: "name",
  subject_token_type: "subject_token_type",
  action_id: "action_id",
  type: "custom_authentication"
)

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.tokenExchangeProfiles.create({
        name: "name",
        subjectTokenType: "subject_token_type",
        actionId: "action_id",
        type: "custom_authentication",
    });
}
main();

import { ManagementClient } from "auth0";

async function main() {
    const client = new ManagementClient({
        domain: "{YOUR_DOMAIN}",
        token: "<token>",
    });
    await client.tokenExchangeProfiles.create({
        name: "name",
        subjectTokenType: "subject_token_type",
        actionId: "action_id",
        type: "custom_authentication",
    });
}
main();

curl --request POST \
  --url https://{tenantDomain}/api/v2/token-exchange-profiles \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "Token Exchange Profile 1",
  "subject_token_type": "<string>",
  "action_id": "<string>",
  "type": "custom_authentication"
}
'

201

{
  "id": "<string>",
  "name": "Token Exchange Profile 1",
  "subject_token_type": "<string>",
  "action_id": "<string>",
  "type": "custom_authentication",
  "created_at": "2024-01-01T00:00:00.000Z",
  "updated_at": "2024-01-01T00:00:00.000Z"
}

承認

bearerAuthoAuth2ClientCredentials

Authorization · string · header · 必須

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

ボディ

application/jsonapplication/x-www-form-urlencoded

name · string · デフォルト: Token Exchange Profile 1 · 必須

Friendly name of this profile.

Required string length: 3 - 50

subject_token_type · string<url> · 必須

Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.

Required string length: 8 - 100

action_id · string · 必須

The ID of the Custom Token Exchange action to execute for this profile, in order to validate the subject_token. The action must use the custom-token-exchange trigger.

Required string length: 1 - 36

type · enum<string> · 必須

The type of the profile, which controls how the profile will be executed when receiving a token exchange request.

利用可能なオプション: custom_authentication

Required string length: 1 - 21

レスポンス

201

application/json

Token exchange profile successfully created.

id · string<token-exchange-profile-id>

The unique ID of the token exchange profile.

name · string · デフォルト: Token Exchange Profile 1

Friendly name of this profile.

Required string length: 3 - 50

subject_token_type · string<url>

Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.

Required string length: 8 - 100

action_id · string

The ID of the Custom Token Exchange action to execute for this profile, in order to validate the subject_token. The action must use the custom-token-exchange trigger.

Required string length: 1 - 36

type · enum<string>

The type of the profile, which controls how the profile will be executed when receiving a token exchange request.

利用可能なオプション: custom_authentication

Required string length: 1 - 21

created_at · string<date-time> · デフォルト: 2024-01-01T00:00:00.000Z

The time when this profile was created.

updated_at · string<date-time> · デフォルト: 2024-01-01T00:00:00.000Z

The time when this profile was updated.