Federation
Token Exchange
Token Exchange is the step where the client application trades an authorization code for tokens.
Definition
Token Exchange is the protocol phase in which the client application sends the authorization code to the authorization server's token endpoint in order to receive the tokens required for identity handling and possible resource access. It bridges the interactive authentication step and the application's local session creation.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.