APIs & SDKs
SSO Token Exchange
Vercel SDK
POSThttps://api.vercel.com/v1/integrations/sso/token
SSO Token Exchange
During the autorization process, Vercel sends the user to the provider redirectLoginUrl, that includes the OAuth authorization code parameter. The provider then calls the SSO Token Exchange endpoint with the sent code and receives the OIDC token. They log the user in based on this token and redirects the user back to the Vercel account using deep-link parameters included the redirectLoginUrl. Providers should not persist the returned id_token in a database since the token will expire. See Authentication with SSO for more details.
Option 1Option 2
The sensitive code received from Vercel
The integration client id
The state received from the initialization request
Required
Optional
application/json
Required
The integration redirect URI
The integration client secret
string
Required
client_id
redirect_uri
client_secret
The grant type, when using x-www-form-urlencoded content type
Optional
string
Required
grant_type
Response
200Success
access_token
expires_in
string
Required
Variant 1Variant 2
Optional
id_token
refresh_token
number
string
Required
string
token_type
403Error
Optional
string
Required
500Error
This page is not in the current cross-link map.