TAL Partner Identity
TAL's partner-facing OpenID Connect identity tenant (Okta org talpartner-au.okta.com), and the only machine-readable API contract TAL serves anonymously. Full OIDC discovery and RFC 8414 authorization-server metadata return 200, advertising authorization-code with PKCE (S256), device code, CIBA, refresh tokens, pushed authorization requests and DPoP, plus introspection, revocation and logout endpoints. It authenticates partner applications into TAL's gated API estate; TAL operates no open client registration, so obtaining a client requires a partner agreement. Two sibling tenants exist for ACP (auth.acp.tal.com.au) and TAL Claims Assist (auth.claimsassist.tal.com.au).