The Okta Token Exchange API provides a mechanism for converting Okta authentication tokens into Cortex access and refresh tokens. This service acts as a bridge between Okta's identity provider and Cortex's authentication system.
\nValidates an Okta JWT token and exchanges it for Cortex's access and refresh tokens.
\ndeviceId is a UUID v4 which is a required field and it should be stored in local storage
\n","urlObject":{"protocol":"https","path":["v1","token"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[{"id":"d3f42f6c-6356-4484-8d67-49044d27b291","name":"Fail: Invalid okta token","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"token","value":"invalidToken","type":"text","uuid":"ac114e2b-6011-4955-8924-6b7e8a4cd46f"},{"key":"deviceId","value":"d18093d8-96b6-4344-ab37-7bd153ae0b07","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"ECB","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Unauthorized","code":401,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"229"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Mon, 23 Jun 2025 14:25:36 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 57b26b5788088fd81c9cc4244d2d77a4.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"DUB56-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"Lrtg3CxDG1siQDoS5GWRf1Ld2iJH4FewS9HcO7-9cDNThl3bT_FUVQ=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"unauthorized\",\n \"domain\": \"global\"\n },\n \"data\": \"token contains an invalid number of segments\",\n \"message\": \"Could not decode authorization token\",\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:25:36.468810478Z\"\n }\n}"},{"id":"5ea51327-7376-4f68-9cc5-dbfe5537266d","name":"Fail: Missing token","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"deviceId","value":"12cf0168-9ad7-4407-bca4-7870206107de","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"{{clientId}}","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Bad Request","code":400,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"262"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Mon, 23 Jun 2025 14:28:32 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 38bb3b339a2c56da9005af52a919fcaa.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"DUB56-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"rs8t1kMQeBEr_uI1wLBlqgpnpLZdTqVlXH3IiBCE6YzOPUOamyj_iA=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"bad_request\",\n \"domain\": \"global\"\n },\n \"data\": \"Key: 'exchangeTokenForm.Token' Error:Field validation for 'Token' failed on the 'required' tag\",\n \"message\": \"Failed to parse form\",\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:28:32.389474265Z\"\n }\n}"},{"id":"bf29012a-ca5d-4627-af30-d925051d464a","name":"Fail: Email not present in okta token","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"deviceId","value":"b223df18-44ff-4295-9f33-fbd01447b92b","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"ECB","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"},{"key":"token","value":"{{oktaToken}}","type":"text","uuid":"c3c0fd7a-0e36-45fd-8a54-273c345a9774"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Bad Request","code":400,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"262"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Mon, 23 Jun 2025 14:28:32 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 38bb3b339a2c56da9005af52a919fcaa.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"DUB56-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"rs8t1kMQeBEr_uI1wLBlqgpnpLZdTqVlXH3IiBCE6YzOPUOamyj_iA=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"bad_request\",\n \"domain\": \"global\"\n },\n \"data\": \"\",\n \"message\": \"Email not present in token, please ensure 'email' is included in the scope when making auth call to sso\",\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:28:32.389474265Z\"\n }\n}"},{"id":"1d498bc5-a945-437f-8c94-90548898b98b","name":"Fail: Missing deviceId","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"token","value":"invalidToken","type":"text","uuid":"ac114e2b-6011-4955-8924-6b7e8a4cd46f"},{"key":"clientId","value":"ECB","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Bad Request","code":400,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"268"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Mon, 23 Jun 2025 14:29:11 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 38bb3b339a2c56da9005af52a919fcaa.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"DUB56-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"Z50QMqjl96BLlj1LcTdPQRQcHwlNHDpArlUc1rK1eLaED1VLEvNoYA=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"bad_request\",\n \"domain\": \"global\"\n },\n \"data\": \"Key: 'exchangeTokenForm.DeviceID' Error:Field validation for 'DeviceID' failed on the 'required' tag\",\n \"message\": \"Failed to parse form\",\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:29:11.684854043Z\"\n }\n}"},{"id":"68ef7344-bb79-481c-941e-9e7a09221427","name":"Fail: Invalid deviceId","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"token","value":"{{oktaToken}}","type":"text","uuid":"ac114e2b-6011-4955-8924-6b7e8a4cd46f"},{"key":"deviceId","value":"not-uuid","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"ECB","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Bad Request","code":400,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"176"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Mon, 23 Jun 2025 14:30:39 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 5f57bf42aafd25e200186a6a48945894.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"DUB56-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"VjYxiTRvKfyMCJfPzv_Isw8cXEfaBGW2_gYGIYW-zsJDQ2Swa5CcsA=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"bad_request\",\n \"domain\": \"global\"\n },\n \"message\": \"deviceId parameter is not a valid UUID\",\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:30:39.559104125Z\"\n }\n}"},{"id":"2e816b26-1ef6-414a-bc98-5a57ec25e5e4","name":"Fail: Invalid public key","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"token","value":"{{oktaToken}}","type":"text","uuid":"ac114e2b-6011-4955-8924-6b7e8a4cd46f"},{"key":"deviceId","value":"6947bbee-4131-4385-b64e-6cfb409d202b","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"{{clientId}}","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"Unauthorized","code":401,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"},{"key":"Content-Length","value":"257"},{"key":"Connection","value":"keep-alive"},{"key":"Date","value":"Tue, 24 Jun 2025 08:59:55 GMT"},{"key":"Vary","value":"Origin"},{"key":"X-Cache","value":"Error from cloudfront"},{"key":"Via","value":"1.1 a510ce56c300e2d885e99cf42a868640.cloudfront.net (CloudFront)"},{"key":"X-Amz-Cf-Pop","value":"WAW51-P3"},{"key":"Alt-Svc","value":"h3=\":443\"; ma=86400"},{"key":"X-Amz-Cf-Id","value":"zX_LuiUcr-kvmrikhLjmW6T2rDm4yOT8YHy_CnD7Vo9OoOpdvCpXaA=="}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"fail\",\n \"error\": {\n \"code\": \"unauthorized\",\n \"domain\": \"global\"\n },\n \"data\": \"no public key found with kid FCq7Mg7n28sLYsKNp7EY9VG1FIi_RAyxHmd2UjCs16I\",\n \"message\": \"Could not decode authorization token\",\n \"metadata\": {\n \"createdAt\": \"2025-06-24T08:59:55.554620875Z\"\n }\n}"},{"id":"9fe3f535-bb14-41cf-8c24-b8d19490bc4d","name":"Success","originalRequest":{"method":"POST","header":[],"body":{"mode":"urlencoded","urlencoded":[{"key":"token","value":"{{oktaToken}}","type":"text","uuid":"ac114e2b-6011-4955-8924-6b7e8a4cd46f"},{"key":"deviceId","value":"07330a0e-0cf6-479c-ba1d-7d8dc75498b2","type":"text","uuid":"7949ca44-531e-4c17-a33f-66d1ba7aa66f"},{"key":"clientId","value":"{{clientId}}","type":"text","uuid":"6a69ce17-1439-49f7-a6f4-087f7ab553ad"}]},"url":"https://{{baseUrl}}/v1/token"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json","description":"","type":"text"}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"success\",\n \"data\": {\n \"access_token\": \"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjU0MDAzMSwic2NvcGUiOlsib3Blbl9pZCIsInByb2ZpbGUiXSwiaXNzIjoiSW5Dcm93ZCIsImV4cCI6MTUzMjc5MDM5NiwiZmlyc3RfbmFtZSI6IlVzZXIiLCJhdXRob3JpdGllcyI6WyJST0xFX1VTRVJfKiJdLCJqdGkiOiI1MTllN2M2My03YTEyLTQxYzYtYmRlYy1mNzU1Mjk3MzgxMDQiLCJjbGllbnRfaWQiOiJJTkNST1dEIiwiZW1haWwiOiJ0ZXN0QGV4YW1wbGUuY29tIn0.U9nDZpXsceWZE94Q6Inrd9TlBJTXBZ0VY1hkCpG56WZYB_RRcY7Ucy0d0ndExM54LSMKnM5nov3L9vQu3nCiVW7Q2cJ5VmH7Cu1Q6dyBXdIORuXGN-7L8bEkSp78EJIa5_8HCuK7NNereNZ2mXPsKvqCHoKlutMD9ToIUcnD9BJ3pl-6R1v-CT7843ZIWe3Es5nx77Td-Wt34tX7OHFX0iYxHfvua_cZ_6rqun2L_EFYxbtsq2c9vjX3fYR6BPD9PV5E9KxyLVf_KMNQXzstHifEuM_mdUJh4wGgc2NZwx_OdqX5Hb9s4L1-vSQvmyqSN03QGmq-IU4eDOb3_4o_Hg\",\n \"token_type\": \"bearer\",\n \"refresh_token\": \"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjU0MDAzMSwic2NvcGUiOlsib3Blbl9pZCIsInByb2ZpbGUiXSwiYXRpIjoiNTE5ZTdjNjMtN2ExMi00MWM2LWJkZWMtZjc1NTI5NzM4MTA0IiwiaXNzIjoiSW5Dcm93ZCIsImV4cCI6MTU0ODQ4Mzk5NiwiZmlyc3RfbmFtZSI6IlVzZXIiLCJhdXRob3JpdGllcyI6WyJST0xFX1VTRVJfKiJdLCJqdGkiOiI2NjhiMDI5Zi1lZmU4LTRjNDItYTcyOC1kZjRkOTgxMTY0ZTMiLCJjbGllbnRfaWQiOiJJTkNST1dEIiwiZW1haWwiOiJ0ZXN0QGV4YW1wbGUuY29tIn0.NWpsor2HSjJ5Wvm8osTY-7fFS9v8aHVAJ0zZJYHN4CtJluMbywXQUkwZLL32VohpUIb2ZM0KMxHUuIiXJ6EWBNIFBvXFgtFwa7fQplmB-99hyXm2X5CHWcwZwAWqhy22ueDIBZv7ry3AGXus2PfB5hp2RftMEyieZCjE4E5Lh-jNYhcaoJargUia0RyIyTQt8D04767rKZ5vNJvLd-FARCQDdAyrsUUAesHfbd8T9q4fbe0_2zIkW6x0zhougRRxsOyhJ1xCAZueu0nDjmoY4DwUz7rB2J73nkl6W9Y4Hle2JzZopqHWkNytRwvjMoIfkFbKVU6VvueMwe5sOx3HTw\",\n \"expires_in\": 86399,\n \"scope\": \"open_id profile\",\n \"jti\": \"519e7c63-7a12-41c6-bdec-f75529738104\"\n },\n \"metadata\": {\n \"createdAt\": \"2025-06-23T14:30:39.559104125Z\"\n }\n}"}],"_postman_id":"91882697-f20f-458a-81f1-c5dbf0571615"}]}