---
title: "Create Authorization Extension"
method: POST
path: "/programs/{programCode}/accounts/{accountIdentifier}/experian/authorizeExtend"
tags: ["Experian"]
---

# Create Authorization Extension

`POST /programs/{programCode}/accounts/{accountIdentifier}/experian/authorizeExtend`

Creates an authorization extension for the specified account, allowing extended access or permissions as defined in the request body.

## Path parameters

- `programCode` string, required
- `accountIdentifier` string, required

## Headers

- `X-GD-RequestId` string, required

## Request body

- ExperianCreateAuthorizeExtendRequest — Represents a request to create or extend an authorization with Experian. Contains all required parameters for the authorization process, including headers, URIs, and context-specific values. Inherits from Gd.Bos.DataTransfer.Request.RequestBase to provide standard request metadata and header details.
  - `authorization_Gss` string, nullable — Gets or sets the authorization header value for GSS authentication.
  - `redirect_uri` string, nullable — Gets or sets the redirect URI to be used after authorization.
  - `response_type` string, nullable — Gets or sets the response type for the authorization request.
  - `audience` string, nullable — Gets or sets the audience for the authorization request.
  - `resource` string, nullable — Gets or sets the resource for which authorization is requested.
  - `subject` string, nullable — Gets or sets the subject of the authorization request.
  - `brand` string, nullable — Gets or sets the brand associated with the authorization request.
  - `scope` string, nullable — Gets or sets the scope of the authorization request.
  - `state` string, nullable — Gets or sets the state parameter for the authorization request, used for correlation and validation.

## Response `200`

OK

- ExperianCreateAuthorizeExtendResponse — Represents the response for the Experian Create Authorize Extend API operation. Inherits standard response metadata and details from Gd.Bos.DataTransfer.Response.ResponseBase. Contains the location URI for the created or extended authorization resource.
  - `location` string, nullable — Gets or sets the location URI of the created or extended authorization resource.
  - `responseDetails` ResponseDetail[], nullable — Required: A list of response details providing status codes, descriptions, and additional information about the result of the operation.
    - `code` integer — The primary status or error code for the response (e.g., 200 for success, 400 for validation error).
    - `subCode` integer, nullable — An optional subcode providing more granular detail about the response or error.
    - `description` string, nullable — A human-readable description of the response, error, or status.
    - `url` string, nullable — A URL linking to documentation or a web page with more information about the response code.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.net/greendot/apis/baas-apis.md) · [All operations](https://skmtc.net/greendot/apis/baas-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/greendot/baas-apis/revisions/666553766b78/schema)