---
title: "POST /device_authorization"
method: POST
path: "/device_authorization"
---

# POST /device_authorization

`POST /device_authorization`

Initiates device authorization by requesting a pair of verification codes from the authorization service.

## Request body

- object
  - `clientId` string, required — The unique identifier string for the client that is registered with IAM Identity Center. This value should come from the persisted result of the <a>RegisterClient</a> API operation.
  - `clientSecret` string, required — A secret string that is generated for the client. This value should come from the persisted result of the <a>RegisterClient</a> API operation.
  - `startUrl` string, required — The URL for the AWS access portal. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/using-the-portal.html">Using the AWS access portal</a> in the <i>IAM Identity Center User Guide</i>.

## Response `200`

Success

- StartDeviceAuthorizationResponse
  - `deviceCode` string — The short-lived code that is used by the device when polling for a session token.
  - `userCode` string — A one-time user verification code. This is needed to authorize an in-use device.
  - `verificationUri` string — The URI of the verification page that takes the <code>userCode</code> to authorize the device.
  - `verificationUriComplete` string — An alternate URL that the client can use to automatically launch a browser. This process skips the manual step in which the user visits the verification page and enters their code.
  - `expiresIn` integer — Indicates the number of seconds in which the verification code will become invalid.
  - `interval` integer — Indicates the number of seconds the client must wait between attempts when polling for a session.

## Other responses

- `480` — InvalidRequestException
- `481` — InvalidClientException
- `482` — UnauthorizedClientException
- `483` — SlowDownException
- `484` — InternalServerException

---

[API](https://skmtc.net/aws/apis/sso-oidc.md) · [All operations](https://skmtc.net/aws/apis/sso-oidc/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/sso-oidc/versions/106a5b18f52b/schema)