Fields
| Field | Type | Required | Description | Example |
|---|---|---|---|---|
FederationPolicyID | string | ✅ | The federation policy to evaluate, from Settings → Workload identity. Binds the exchange to one organization. | 4b2f7d1e-8c3a-4e5f-9a6b-1c2d3e4f5a6b |
GrantType | components.GrantType | ✅ | Must be urn:ietf:params:oauth:grant-type:token-exchange. | urn:ietf:params:oauth:grant-type:token-exchange |
RequestedTokenType | *components.RequestedTokenType | ➖ | Optional; when present must be urn:ietf:params:oauth:token-type:access_token. | urn:ietf:params:oauth:token-type:access_token |
Scope | *components.TokenExchangeRequestScope | ➖ | Optional; only inference is available. | inference |
SubjectToken | string | ✅ | The JWT issued by your identity provider. | <jwt from your identity provider> |
SubjectTokenType | components.SubjectTokenType | ✅ | Must be urn:ietf:params:oauth:token-type:jwt. | urn:ietf:params:oauth:token-type:jwt |