Skip to navigation
Platform APIworkload_identity_providers

Exchange a workload credential

Validates an external credential against an active provider and returns a short-lived Mixlayer bearer token.

Request

This endpoint expects an object.
grant_typestringRequired

RFC 8693 token-exchange grant vocabulary.

identity_provider_idstringRequired
Workload identity provider selected for validation and policy evaluation.
subject_tokenstringRequired
External OIDC JWT.
subject_token_typestringRequired

External credential type; currently the JWT token type.

Response

Short-lived workload access token

access_tokenstring
Prefixed compact Mixlayer workload JWT.
expires_inlong>=0
Remaining token lifetime in seconds.
issued_token_typestring
OAuth token type describing the issued credential.
token_typestring
Bearer authentication scheme.

Errors

400
Bad Request Error
413
Content Too Large Error
429
Too Many Requests Error
503
Service Unavailable Error