---
title: "POST /identity/oidc/provider/{name}/authorize"
method: POST
path: "/identity/oidc/provider/{name}/authorize"
tags: ["identity"]
---

# POST /identity/oidc/provider/{name}/authorize

`POST /identity/oidc/provider/{name}/authorize`

## Request

- The document declares no server URL.
- Auth: none declared
- TypeScript: <https://skmtc.dev/lensesio/apis/hashicorp-vault-api/docs/identity/oidc/provider/:name/authorize/post.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- IdentityOidcProviderAuthorizeRequest
  - `client_id` string, required: The ID of the requesting client.
  - `code_challenge` string: The code challenge derived from the code verifier.
  - `code_challenge_method` string: The method that was used to derive the code challenge. The following methods are supported: 'S256', 'plain'. Defaults to 'plain'.
  - `max_age` integer: The allowable elapsed time in seconds since the last time the end-user was actively authenticated.
  - `nonce` string: The value that will be returned in the ID token nonce claim after a token exchange.
  - `redirect_uri` string, required: The redirection URI to which the response will be sent.
  - `response_type` string, required: The OIDC authentication flow to be used. The following response types are supported: 'code'
  - `scope` string, required: A space-delimited, case-sensitive list of scopes to be requested. The 'openid' scope is required.
  - `state` string: The value used to maintain state between the authentication request and client.

## Response `200`

OK

---

[API](https://skmtc.dev/lensesio/apis/hashicorp-vault-api.md) - [All operations](https://skmtc.dev/lensesio/apis/hashicorp-vault-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lensesio/apis/hashicorp-vault-api/revisions/bd8194de0697?raw)