Descope

Descope Oauth2 API

The Oauth2 API from Descope — 30 operation(s) for oauth2.

GitHub OpenAPI

Operations 42

GET /oauth2/v1/apps/agentic/{project_id}/{mcp_server_id}/authorize #
POST /oauth2/v1/apps/agentic/{project_id}/{mcp_server_id}/authorize #
POST /oauth2/v1/apps/agentic/{project_id}/{mcp_server_id}/token #
GET /oauth2/v1/apps/authorize Get Authorization Endpoint #
POST /oauth2/v1/apps/authorize Post Authorization Endpoint #
POST /oauth2/v1/apps/bc-authorize #
POST /oauth2/v1/apps/device #
POST /oauth2/v1/apps/finish-authorize Finish Authorization Endpoint #
POST /oauth2/v1/apps/revoke OIDC revoke endpoint #
POST /oauth2/v1/apps/token Third Party application token endpoint #
GET /oauth2/v1/apps/userinfo Third Party application Get UserInfo endpoint #
POST /oauth2/v1/apps/userinfo Third Party application Post UserInfo endpoint #
GET /oauth2/v1/apps/{project_id}/authorize #
POST /oauth2/v1/apps/{project_id}/authorize #
POST /oauth2/v1/apps/{project_id}/bc-authorize #
POST /oauth2/v1/apps/{project_id}/device #
POST /oauth2/v1/apps/{project_id}/revoke #
POST /oauth2/v1/apps/{project_id}/token #
GET /oauth2/v1/apps/{project_id}/userinfo #
POST /oauth2/v1/apps/{project_id}/userinfo #
GET /oauth2/v1/authorize OIDC Authorize #
POST /oauth2/v1/authorize OIDC Authorize #
POST /oauth2/v1/authorize/entramfa OIDC Authorize Entra MFA #
POST /oauth2/v1/device OIDC Device #
GET /oauth2/v1/finish-authorize OIDC Finish Authorize #
POST /oauth2/v1/finish-authorize OIDC Finish Authorize #
GET /oauth2/v1/logout OIDC End Session #
POST /oauth2/v1/logout OIDC End Session #
POST /oauth2/v1/revoke OIDC Revoke #
POST /oauth2/v1/token OIDC Token #
GET /oauth2/v1/userinfo OIDC UserInfo #
POST /oauth2/v1/userinfo OIDC UserInfo #
GET /{ssoAppId}/oauth2/v1/authorize OIDC Authorize #
POST /{ssoAppId}/oauth2/v1/authorize OIDC Authorize #
POST /{ssoAppId}/oauth2/v1/authorize/entramfa OIDC Authorize Entra MFA #
POST /{ssoAppId}/oauth2/v1/device OIDC Device #
GET /{ssoAppId}/oauth2/v1/logout OIDC End Session #
POST /{ssoAppId}/oauth2/v1/logout OIDC End Session #
POST /{ssoAppId}/oauth2/v1/revoke OIDC Revoke #
POST /{ssoAppId}/oauth2/v1/token OIDC Token #
GET /{ssoAppId}/oauth2/v1/userinfo OIDC UserInfo #
POST /{ssoAppId}/oauth2/v1/userinfo OIDC UserInfo #

Documentation

📖
Documentation
https://docs.descope.com/api
📖
Documentation
https://docs.descope.com/auth-methods
📖
APIReference
https://docs.descope.com/api/openapi-spec
📖
Documentation
https://docs.descope.com/manage
📖
APIReference
https://docs.descope.com/api
📖
Documentation
https://docs.descope.com/inbound-apps
📖
Documentation
https://docs.descope.com/scim
📖
Documentation
https://docs.descope.com/jwks

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/descope/refs/heads/main/openapi/descope-oauth2-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/descope-oauth2-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

descope-oauth2-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Descope Apps Oauth2 API
  description: Descope API
  contact:
    name: Descope
    url: https://descope.com
    email: support@descope.com
  version: 0.0.1
servers:
- url: https://api.descope.com
  description: Descope Production
- url: '{customUrl}'
  description: Custom server URL
  variables:
    customUrl:
      default: https://api.descope.com
      description: Your Descope API base URL
security:
- Descope Project ID: []
  Descope Project ID:Refresh JWT: []
  Descope Project ID:Session JWT: []
  Descope Project ID and Management Key: []
  Descope Project ID:Access Key: []
tags:
- name: Oauth2
paths:
  /oauth2/v1/apps/agentic/{project_id}/{mcp_server_id}/authorize:
    get:
      tags:
      - Oauth2
      description: Third Party application authorization GET endpoint by MCP server ID
      operationId: ThirdPartyApplicationAuthorizeGetByMcpServerID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      - name: mcp_server_id
        in: path
        required: true
        schema:
          type: string
      - name: response_type
        in: query
        description: "RFC 9101 §6.3: when a JAR `request` parameter is present, response_type and\n redirect_uri may be omitted from the outer query and carried inside the JWT.\n The controller validates the resolved values after JAR processing."
        schema:
          type: string
      - name: scope
        in: query
        schema:
          type: string
      - name: client_id
        in: query
        schema:
          type: string
      - name: state
        in: query
        schema:
          type: string
      - name: redirect_uri
        in: query
        schema:
          type: string
      - name: code_challenge_method
        in: query
        description: PKCE
        schema:
          type: string
      - name: code_challenge
        in: query
        schema:
          type: string
      - name: nonce
        in: query
        schema:
          type: string
      - name: loginHint
        in: query
        schema:
          type: string
      - name: prompt
        in: query
        schema:
          type: string
      - name: flow
        in: query
        schema:
          type: string
      - name: flow_token
        in: query
        schema:
          type: string
      - name: resource
        in: query
        description: RFC 8707 - OAuth 2.0 Resource Indicators
        schema:
          type: array
          items:
            type: string
      - name: tenant
        in: query
        schema:
          type: string
      - name: style
        in: query
        schema:
          type: string
      - name: dpop_jkt
        in: query
        schema:
          type: string
      - name: request
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application authorization GET endpoint by MCP server ID
        keywords: api, third party apps
    post:
      tags:
      - Oauth2
      description: Third Party application authorization POST endpoint by MCP server ID
      operationId: ThirdPartyApplicationAuthorizePOSTByMcpServerID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      - name: mcp_server_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationAuthZEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application authorization POST endpoint by MCP server ID
        keywords: api, third party apps
  /oauth2/v1/apps/agentic/{project_id}/{mcp_server_id}/token:
    post:
      tags:
      - Oauth2
      description: Third Party application token endpoint by MCP server ID
      operationId: ThirdPartyApplicationTokenEndpointByMcpServerID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      - name: mcp_server_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationTokenEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCTokenEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application token endpoint by MCP server ID
        keywords: api, third party apps
  /oauth2/v1/apps/authorize:
    get:
      tags:
      - Oauth2
      description: Third Party application authorization GET endpoint
      operationId: ThirdPartyApplicationAuthorizeGet
      parameters:
      - name: response_type
        in: query
        description: "RFC 9101 §6.3: when a JAR `request` parameter is present, response_type and\n redirect_uri may be omitted from the outer query and carried inside the JWT.\n The controller validates the resolved values after JAR processing."
        schema:
          type: string
      - name: scope
        in: query
        schema:
          type: string
      - name: client_id
        in: query
        schema:
          type: string
      - name: state
        in: query
        schema:
          type: string
      - name: redirect_uri
        in: query
        schema:
          type: string
      - name: code_challenge_method
        in: query
        description: PKCE
        schema:
          type: string
      - name: code_challenge
        in: query
        schema:
          type: string
      - name: nonce
        in: query
        schema:
          type: string
      - name: loginHint
        in: query
        schema:
          type: string
      - name: prompt
        in: query
        schema:
          type: string
      - name: flow
        in: query
        schema:
          type: string
      - name: flow_token
        in: query
        schema:
          type: string
      - name: resource
        in: query
        description: RFC 8707 - OAuth 2.0 Resource Indicators
        schema:
          type: array
          items:
            type: string
      - name: project_id
        in: query
        schema:
          type: string
      - name: tenant
        in: query
        schema:
          type: string
      - name: mcp_server_id
        in: query
        schema:
          type: string
      - name: style
        in: query
        schema:
          type: string
      - name: dpop_jkt
        in: query
        schema:
          type: string
      - name: request
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Get Authorization
      summary: Get Authorization Endpoint
      x-meta:
        title: Get Authorization Endpoint | Third Party Apps
        description: Third Party application authorization GET endpoint
        keywords: api, third party apps
    post:
      tags:
      - Oauth2
      description: Third Party application authorization POST endpoint
      operationId: ThirdPartyApplicationAuthorize
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationAuthZEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Post Authorization
      summary: Post Authorization Endpoint
      x-meta:
        title: Post Authorization Endpoint | Third Party Apps
        description: Third Party application authorization POST endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/bc-authorize:
    post:
      tags:
      - Oauth2
      description: Third Party application CIBA backchannel authentication endpoint
      operationId: ThirdPartyApplicationCIBAEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CIBAAuthRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CIBAAuthResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application CIBA backchannel authentication endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/device:
    post:
      tags:
      - Oauth2
      description: Third Party application device endpoint
      operationId: ThirdPartyApplicationDeviceEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCDeviceEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCDeviceEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application device endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/finish-authorize:
    post:
      tags:
      - Oauth2
      description: Third Party application authorization finish endpoint
      operationId: ThirdPartyApplicationFinish
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationFinishEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Finish Authorization
      summary: Finish Authorization Endpoint
      x-meta:
        title: Finish Authorization Endpoint | Third Party Apps
        description: Third Party application authorization finish endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/revoke:
    post:
      tags:
      - Oauth2
      description: OIDC revoke endpoint
      operationId: ThirdPartyApplicationRevocationEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationRevocationEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: OIDC revoke endpoint
      summary: OIDC revoke endpoint
      x-meta:
        title: OIDC revoke endpoint | Third Party Apps
        description: OIDC revoke endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/token:
    post:
      tags:
      - Oauth2
      description: Third Party application token endpoint
      operationId: ThirdPartyApplicationTokenEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationTokenEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCTokenEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Third Party application token endpoint
      summary: Third Party application token endpoint
      x-meta:
        title: Third Party application token endpoint | Third Party Apps
        description: Third Party application token endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/userinfo:
    get:
      tags:
      - Oauth2
      description: Third Party application Get UserInfo endpoint
      operationId: ThirdPartyApplicationUserInfoEndpointGet
      parameters:
      - name: project_id
        in: query
        description: Can be empty as data arrived on the Authorization header token
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Get UserInfo
      summary: Third Party application Get UserInfo endpoint
      x-meta:
        title: Third Party application Get UserInfo endpoint | Third Party Apps
        description: Third Party application Get UserInfo endpoint
        keywords: api, third party apps
    post:
      tags:
      - Oauth2
      description: Third Party application Post UserInfo endpoint
      operationId: ThirdPartyApplicationUserInfoEndpointPost
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      title: Post UserInfo
      summary: Third Party application Post UserInfo endpoint
      x-meta:
        title: Third Party application Post UserInfo endpoint | Third Party Apps
        description: Third Party application Post UserInfo endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/authorize:
    get:
      tags:
      - Oauth2
      description: Third Party application authorization GET endpoint
      operationId: ThirdPartyApplicationAuthorizeGetByProjectID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      - name: response_type
        in: query
        description: "RFC 9101 §6.3: when a JAR `request` parameter is present, response_type and\n redirect_uri may be omitted from the outer query and carried inside the JWT.\n The controller validates the resolved values after JAR processing."
        schema:
          type: string
      - name: scope
        in: query
        schema:
          type: string
      - name: client_id
        in: query
        schema:
          type: string
      - name: state
        in: query
        schema:
          type: string
      - name: redirect_uri
        in: query
        schema:
          type: string
      - name: code_challenge_method
        in: query
        description: PKCE
        schema:
          type: string
      - name: code_challenge
        in: query
        schema:
          type: string
      - name: nonce
        in: query
        schema:
          type: string
      - name: loginHint
        in: query
        schema:
          type: string
      - name: prompt
        in: query
        schema:
          type: string
      - name: flow
        in: query
        schema:
          type: string
      - name: flow_token
        in: query
        schema:
          type: string
      - name: resource
        in: query
        description: RFC 8707 - OAuth 2.0 Resource Indicators
        schema:
          type: array
          items:
            type: string
      - name: tenant
        in: query
        schema:
          type: string
      - name: mcp_server_id
        in: query
        schema:
          type: string
      - name: style
        in: query
        schema:
          type: string
      - name: dpop_jkt
        in: query
        schema:
          type: string
      - name: request
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application authorization GET endpoint
        keywords: api, third party apps
    post:
      tags:
      - Oauth2
      description: Third Party application authorization POST endpoint
      operationId: ThirdPartyApplicationAuthorizePostByProjectID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationAuthZEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application authorization POST endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/bc-authorize:
    post:
      tags:
      - Oauth2
      description: Third Party application CIBA backchannel authentication endpoint
      operationId: ThirdPartyApplicationCIBAEndpoint
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CIBAAuthRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CIBAAuthResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application CIBA backchannel authentication endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/device:
    post:
      tags:
      - Oauth2
      description: Third Party application device endpoint
      operationId: ThirdPartyApplicationDeviceEndpoint
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCDeviceEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCDeviceEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application device endpoint
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/revoke:
    post:
      tags:
      - Oauth2
      description: Third Party application revoke endpoint by project ID
      operationId: ThirdPartyApplicationRevocationEndpointByProjectID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationRevocationEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application revoke endpoint by project ID
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/token:
    post:
      tags:
      - Oauth2
      description: Third Party application token endpoint by project ID
      operationId: ThirdPartyApplicationTokenEndpointByProjectID
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationTokenEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCTokenEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application token endpoint by project ID
        keywords: api, third party apps
  /oauth2/v1/apps/{project_id}/userinfo:
    get:
      tags:
      - Oauth2
      description: Third Party application Get UserInfo endpoint by project ID
      operationId: ThirdPartyApplicationUserInfoEndpointGetByProjectID
      parameters:
      - name: project_id
        in: path
        description: Can be empty as data arrived on the Authorization header token
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application Get UserInfo endpoint by project ID
        keywords: api, third party apps
    post:
      tags:
      - Oauth2
      description: Third Party application POST UserInfo endpoint by project ID
      operationId: ThirdPartyApplicationUserInfoEndpointPostByProjectID
      parameters:
      - name: project_id
        in: path
        description: Can be empty as data arrived on the Authorization header token
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThirdPartyApplicationUserInfoEndpointResponse'
      x-publishYaml: thirdPartyApps
      security: []
      x-meta:
        title: undefined | Third Party Apps
        description: Third Party application POST UserInfo endpoint by project ID
        keywords: api, third party apps
  /oauth2/v1/authorize:
    get:
      tags:
      - Oauth2
      summary: OIDC Authorize
      description: OIDC GET authorization endpoint start
      operationId: OIDCAuthZEndpointGetStart
      parameters:
      - name: response_type
        in: query
        schema:
          type: string
      - name: scope
        in: query
        schema:
          type: string
      - name: client_id
        in: query
        schema:
          type: string
      - name: state
        in: query
        schema:
          type: string
      - name: redirect_uri
        in: query
        schema:
          type: string
      - name: code_challenge_method
        in: query
        description: PKCE
        schema:
          type: string
      - name: code_challenge
        in: query
        schema:
          type: string
      - name: dynamic_val
        in: query
        schema:
          type: string
      - name: nonce
        in: query
        schema:
          type: string
      - name: ssoAppId
        in: query
        schema:
          type: string
      - name: loginHint
        in: query
        schema:
          type: string
      - name: prompt
        in: query
        schema:
          type: string
      - name: flow
        in: query
        schema:
          type: string
      - name: flow_token
        in: query
        schema:
          type: string
      - name: tenant
        in: query
        schema:
          type: string
      - name: style
        in: query
        schema:
          type: string
      - name: dpop_jkt
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Authorize | Federated Apps
        description: OIDC GET authorization endpoint start
        keywords: api, federated apps
    post:
      tags:
      - Oauth2
      summary: OIDC Authorize
      description: OIDC POST authorization endpoint start
      operationId: OIDCAuthZEndpointPostStart
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCAuthZEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Authorize | Federated Apps
        description: OIDC POST authorization endpoint start
        keywords: api, federated apps
  /oauth2/v1/authorize/entramfa:
    post:
      tags:
      - Oauth2
      summary: OIDC Authorize Entra MFA
      description: OIDC Entra MFA authorization endpoint
      operationId: OIDCAuthZEndpointEntraMFA
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCAuthZEntraMFAEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Authorize Entra MFA | Federated Apps
        description: OIDC Entra MFA authorization endpoint
        keywords: api, federated apps
  /oauth2/v1/device:
    post:
      tags:
      - Oauth2
      summary: OIDC Device
      description: OIDC device endpoint
      operationId: OIDCDeviceEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCDeviceEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OIDCDeviceEndpointResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Device | Federated Apps
        description: OIDC device endpoint
        keywords: api, federated apps
  /oauth2/v1/finish-authorize:
    get:
      tags:
      - Oauth2
      summary: OIDC Finish Authorize
      description: OIDC POST authorization endpoint finish
      operationId: OIDCAuthZEndpointFinishPost
      parameters:
      - name: state_id
        in: query
        schema:
          type: string
      - name: sso_app_id
        in: query
        schema:
          type: string
      - name: error_redirect_uri
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Finish Authorize | Federated Apps
        description: OIDC POST authorization endpoint finish
        keywords: api, federated apps
    post:
      tags:
      - Oauth2
      summary: OIDC Finish Authorize
      description: OIDC GET authorization endpoint finish
      operationId: OIDCAuthZEndpointFinishGet
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCAuthZEndpointFinishRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Finish Authorize | Federated Apps
        description: OIDC GET authorization endpoint finish
        keywords: api, federated apps
  /oauth2/v1/logout:
    get:
      tags:
      - Oauth2
      summary: OIDC End Session
      description: OIDC end session GET endpoint
      operationId: OIDCEndSessionEndpointGet
      parameters:
      - name: id_token_hint
        in: query
        schema:
          type: string
      - name: client_id
        in: query
        schema:
          type: string
      - name: post_logout_redirect_uri
        in: query
        schema:
          type: string
      - name: state
        in: query
        schema:
          type: string
      - name: ssoAppId
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC End Session | Federated Apps
        description: OIDC end session GET endpoint
        keywords: api, federated apps
    post:
      tags:
      - Oauth2
      summary: OIDC End Session
      description: OIDC end session POST endpoint
      operationId: OIDCEndSessionEndpointPost
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCEndSessionEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC End Session | Federated Apps
        description: OIDC end session POST endpoint
        keywords: api, federated apps
  /oauth2/v1/revoke:
    post:
      tags:
      - Oauth2
      summary: OIDC Revoke
      description: OIDC revoke endpoint
      operationId: OIDCRevocationEndpoint
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCRevocationEndpointRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OperationResponse'
      x-publishYaml: federatedApps
      security: []
      x-meta:
        title: OIDC Revoke | Federated Apps
        description: OIDC revoke endpoint
        keywords: api, federated apps
  /oauth2/v1/token:
    post:
      tags:
      - Oauth2
      summary: OIDC Token
      description: OIDC token en

# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/descope/refs/heads/main/openapi/descope-oauth2-api-openapi.yml