Skip to main content
POST
Delegated Login

Authentication

❌ Organization User (CustomerEmployee)
❌ Delegated User (EndUser)
✅ Service Account

Required Permissions

Auth:Delegated:Login: Always required.

Authorizations

Authorization
string
header
required

Bearer Token: Used to authenticate API requests. More details how to generate the token: Authentication flows

X-DFNS-USERACTION
string
header
required

User Action Signature: Used to sign the change-inducing API requests. More details how to generate the token: User Action Signing flows

Body

application/json
username
string
required

Username/identifier of the user to log in.

Response

200 - application/json

Success

token
string
required

Authentication token issued to the user.

expiry
number

Token expiration time in epoch milliseconds.

identity
object

Decoded identity for the issued token. Populated for flows whose token is not a Dfns-minted JWT (e.g. OIDC passthrough) so clients can skip JWT decoding; absent on flows where the token's claims carry the same fields.

Last modified on October 9, 2026