SSO Token Exchange
During the autorization process, Vercel sends the user to the provider redirectLoginUrl, that includes the OAuth authorization code
parameter. The provider then calls the SSO Token Exchange endpoint with the sent code and receives the OIDC token. They log the user in based on this token and redirects the user back to the Vercel account using deep-link parameters included the redirectLoginUrl. This is used to verify the identity of the user during the Open in Provider flow. Providers should not persist the returned id_token
in a database since the token will expire.
Body
The sensitive code received from Vercel
The integration client id
The integration client secret
The state received from the initialization request
The integration redirect URI
The grant type, when using x-www-form-urlencoded content type
authorization_code