---
title: "POST /identities/GetWorkloadAccessTokenForJWT"
method: POST
path: "/identities/GetWorkloadAccessTokenForJWT"
---

# POST /identities/GetWorkloadAccessTokenForJWT

`POST /identities/GetWorkloadAccessTokenForJWT`

Obtains a workload access token for agentic workloads acting on behalf of a user, using a JWT token.

## Request body

- object
  - `workloadName` string, required — The unique identifier for the registered workload.
  - `userToken` string, password, required — The OAuth 2.0 token issued by the user's identity provider.

## Response `200`

Success

- GetWorkloadAccessTokenForJWTResponse
  - `workloadAccessToken` string, password, required — An opaque token representing the identity of both the workload and the user.

## Other responses

- `480` — UnauthorizedException
- `481` — ValidationException
- `482` — AccessDeniedException
- `483` — ResourceNotFoundException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore/revisions/79623b33d495/schema)