MYmyaltimate
AUTH

Dippr Redeem

Changed on

The Altimate IdP redeems a Dippr handoff ticket for who it names.

Returns identity claims only, never an auth_token or a session. Stateless: the IdP, the only authenticated caller, consumes the jti. Refusals are generic so a caller cannot tell which check failed; the reason is logged, the ticket never is. The current database role must still be exactly Owner.

post/auth/dippr/redeem

Request

Headers

x-tenantstring

Request body

tokenstring required

Response

Successful Response

uidstring required
emailstring required
first_namestring nullable
last_namestring nullable
companystring required

Changes