⚠️ LEGACY ENDPOINT - Delegation tokens are deprecated and disabled for new tenants.
Status: This feature is disabled by default for new tenants. Maintained only for tenants with active add-ons that require delegation.
Migration: There is no direct replacement. Specific use cases should migrate to:
/oauth/token and grant_type=refresh_tokenAllowed applications to obtain an ID Token or a JWT for calling a different API using an existing token.
The access token received from the authorization server in the OAuth 2.0 flow.
Your application's Client ID
The grant type for delegation
urn:ietf:params:oauth:grant-type:jwt-bearer The ID Token you want to exchange
The Client ID of the target application
Space-delimited list of requested scopes
The type of API (e.g., 'firebase', 'aws', 'azure_sb', etc.)