---
title: "Get OpenID Token"
method: POST
path: "/iam/v1/openid/token/"
tags: ["IAM (Identity & Access Management)"]
---

# Get OpenID Token

`POST /iam/v1/openid/token/`

Obtains an OpenID Connect token for authentication.
This endpoint implements the OAuth 2.0 token endpoint as defined in the OpenID Connect specification.

## Request body

- IamOpenIdTokenRequest
  - `client_id` string, required — OAuth 2.0 client identifier
  - `client_secret` string, required — OAuth 2.0 client secret
  - `code` string, required — Authorization code for authorization_code grant type
  - `grant_type` string, required — OAuth 2.0 grant type
  - `password` string, required — Password for password grant type
  - `redirect_uri` string, required — Redirect URI for authorization_code grant type
  - `refresh_token` string, required — Refresh token for refresh_token grant type
  - `scope` string, required — OAuth 2.0 scope
  - `username` string, required — Username for password grant type

## Response `200`

Successfully retrieved the OpenID token.

- IamOpenIdTokenResponse
  - `access_token` string, required — OAuth 2.0 access token
  - `expires_in` integer, required — Number of seconds until the token expires
  - `id_token` string — OpenID Connect ID token
  - `refresh_token` string — OAuth 2.0 refresh token
  - `token_type` string, required — Type of token, typically 'Bearer'

## Other responses

- `400` — Bad request - invalid configuration provided
- `401` — Authentication credentials were invalid, absent or insufficient.
- `403` — Forbidden - insufficient permissions

---

[API](https://skmtc.dev/sotoon/apis/sotoon-api.md) · [All operations](https://skmtc.dev/sotoon/apis/sotoon-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sotoon/sotoon-api/revisions/c937cd9861c5/schema)