Platform›Identity & SSO›Authorization endpoint

Authorization endpoint

Start an OAuth 2.0 Authorization Code + PKCE flow.

Available in sandboxProduction approval required

Standards

OAuth 2.0 + OpenID Connect

Security

Authorization Code + PKCE

Healthcare identity

France + Luxembourg

Access

Sandbox public · production approved

Overview

Mediloop Identity provides a standards-based boundary for authentication and authorization. Public developers can build and test in sandbox; production access is controlled.

Request

Example

GET /oauth/authorize?
  response_type=code&
  client_id=$CLIENT_ID&
  redirect_uri=$REDIRECT_URI&
  scope=openid%20profile&
  code_challenge=$CHALLENGE&
  code_challenge_method=S256

Parameters

Parameter	Required	Description
client_id	Yes	Registered sandbox or approved production application
redirect_uri	Flow dependent	Must exactly match a registered redirect URI
scope	Yes	Request only the minimum approved scopes
state / nonce	Recommended	Protect flow integrity and bind the response

Response

Illustrative response

{
  "sub": "usr_...",
  "iss": "https://identity.mediloop.com",
  "aud": "$CLIENT_ID",
  "scope": "openid profile"
}

Security notes

Use least-privilege scopes, exact redirect URI matching, PKCE for public clients, short-lived access tokens and secure server-side storage for confidential credentials. Do not infer authorization from identity claims alone.

Errors

Error	Meaning
invalid_request	Malformed or incomplete protocol request
invalid_client	Client authentication or registration failed
invalid_grant	Authorization grant is invalid or expired
access_denied	User, policy or approval denied access