---
title: "CIBA Backchannel Authorize"
method: POST
path: "/oauth/bc-authorize"
tags: ["OAuth"]
---

# CIBA Backchannel Authorize

`POST /oauth/bc-authorize`

Initiate a CIBA backchannel authentication request. The user receives a push notification to approve on their mobile device; poll POST /oauth/token with grant_type urn:openid:params:grant-type:ciba to retrieve the approval token.

## Response `200`

Default Response

- object
  - `auth_req_id` string, required — CIBA authentication request ID
  - `expires_in` integer, required — auth_req_id lifetime in seconds
  - `interval` integer — Minimum polling interval in seconds

## Other responses

- `400` — invalid_request / invalid_scope
- `401` — invalid_client / unauthorized_client

---

[API](https://skmtc.net/bkeyid/apis/bkey-api.md) · [All operations](https://skmtc.net/bkeyid/apis/bkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bkeyid/bkey-api/versions/2c7566abec9e/schema)