---
title: "POST /identities/CompleteResourceTokenAuth"
method: POST
path: "/identities/CompleteResourceTokenAuth"
---

# POST /identities/CompleteResourceTokenAuth

`POST /identities/CompleteResourceTokenAuth`

Confirms the user authentication session for obtaining OAuth2.0 tokens for a resource.

## Request body

- object
  - `userIdentifier` object, required — The OAuth2.0 token or user ID that was used to generate the workload access token used for initiating the user authorization flow to retrieve OAuth2.0 tokens.
    - `userToken` string, password — The OAuth2.0 token issued by the user’s identity provider that was used to generate the workload access token
    - `userId` string — The ID of the user for whom you have retrieved a workload access token for
  - `sessionUri` string, required — Unique identifier for the user's authentication session for retrieving OAuth2 tokens. This ID tracks the authorization flow state across multiple requests and responses during the OAuth2 authentication process.

## Response `200`

Success

- CompleteResourceTokenAuthResponse

## Other responses

- `480` — UnauthorizedException
- `481` — ValidationException
- `482` — AccessDeniedException
- `483` — ResourceNotFoundException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore/revisions/79623b33d495/schema)