SMS and SMTP One-Time Password grant - SSO
Token Request
Parameters
Name | Description |
---|---|
grant_type = "http://globalsign.com/iam/sso/oauth2/grant-type/sms-mt-otp" grant_type = "http://globalsign.com/iam/sso/oauth2/grant-type/smtp-otp" | For One-Time Password delivered by SMS For One-Time Password delivered by SMTP |
scope | A space separated list of scope values Should always include "openid" |
username | The resource owner mobile phone number (msisdn) or e-mail address |
ui_locales | Language for sms or e-mail message |
Optional parameters | |
x_globalsign_iam_otp_title | Title (or subject) of e-mail message |
x_globalsign_iam_otp_body | Message body, where provider replaces "{0}" sequence with One-Time Password |
Response
Response to initial token request is a Json formatted document
Name | Description |
---|---|
x_globalsign_iam_challenge | A Json object with "reference" token that must be used for Validation Request |
Validation Request
Parameters
Name | Description |
---|---|
grant_type | Must hold value from initial token request |
scope | Must hold value from initial token request |
username | Must hold value from initial token request |
x_globalsign_iam_reference_id | Exact value of reference token from previous response Note that this value is single-use, provider will generate new reference token for every request |
x_globalsign_iam_otp_code | The resource owner One-Time Password This password was delivered to resource owner by SMS or SMTP |