API Console
test
Sign in with BES

Authorize (sign-in page)

Where a product sends the browser to sign the user in. BES shows its sign-in page and returns the browser to the registered redirect_uri with a one-time code.

GET https://id.test.globalbes.sg/authorize
Address fromOIDC discovery · authorization_endpoint
Parameters
response_type
Always code.
client_id
The product's registered client.
redirect_uri
Exactly one of the client's registered redirect URIs.
scope
openid, plus profile and email as registered for the client.
state
Required. Random value the product checks on return.
nonce
Required. Random value that comes back inside the ID token.
code_challenge
Required. BASE64URL(SHA256(code_verifier)), 43 characters.
code_challenge_method
Always S256.
dpop_jkt
Thumbprint of the DPoP key; required for a client registered with DPoP.
prompt, max_age, acr_values
Optional: force sign-in again, limit its age, ask for a stronger one.
Try it
Open the sign-in pageSigns this console in; state, nonce and PKCE are generated for you
Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release