---
title: "OAuth 2.0 Authorization Request"
slug: "oauth-20-authorization-request"
updated: 2024-07-08T16:51:27Z
published: 2024-07-08T16:51:27Z
canonical: "help.rapididentity.com/oauth-20-authorization-request"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.rapididentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth 2.0 Authorization Request

Issue a GET to `/idp/profile/oauth2/auth` with the following parameters.

| Parameter | Type | Description |
| --- | --- | --- |
| response_type | String *required* | The default value is “code” |
| client_id | String *required* | The Client ID |
| redirect_uri | String *required* | The registered callback URL |
| scope | String *optional* | Space-delimited API scopes to request. The default value is “basic”. |
| state | String *optional* | An opaque value used by the client application to maintain state between the request and callback. |
| response_mode | String *optional* | Not Used |

If the authenticating user does not already have an authenticated Federation session, they will be redirected to the login page.

After successful authentication or validation of the user’s current session, the browser will be redirected to the callback URL with a “code” parameter and a “state” parameter (if one was supplied in the initial request).

The “code” must be exchanged for an access token in the next step.

RapidIdentity currently supports a single scope of “basic” which gives read-only access to the authenticated user’s profile.