---
title: "GenerateAuthorizationUrl retrieves an Okta authorization URL"
method: GET
path: "/authorizationUrl:generate"
---

# GenerateAuthorizationUrl retrieves an Okta authorization URL

`GET /authorizationUrl:generate`

AuthorizationUrl is the Okta authorization URL for a user to consent
to applications being able to access third-party services.
Follow the AuthorizationUrl in the response to authenticate, providing
consent to the application. The resultant access+refresh token will then
be available via GenerateToken.

## Query parameters

- `applicationName` string, required
- `redirectUri` string, required
- `user` string, required

## Headers

- `VND.com.blackrock.Request-ID` string, UUID, required
- `VND.com.blackrock.Origin-Timestamp` string, date-time, required

## Response `200`

A successful response.

- V1AuthorizationUrl
  - `authorizationUrl` string

## Other responses

- `400` — Aladdin® will not process the request due to an apparent client error.
- `401` — Aladdin® will not process the request as the necessary credentials were not provided or were invalid.
- `403` — Aladdin® understood the request but is refusing to authorize it.
- `404` — Aladdin® did not find the resource requested or is unwilling to disclose if it exists. Could indicate a defect in the client program or data which is no longer accessible.

---

[API](https://skmtc.dev/blackrock/apis/token.md) · [All operations](https://skmtc.dev/blackrock/apis/token/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/blackrock/token/revisions/31b70af987e8/schema)