---
title: "Use this endpoint to initiate backchannel authentication"
method: POST
path: "/ciba"
tags: ["Backchannel Authentication Endpoint"]
---

# Use this endpoint to initiate backchannel authentication

`POST /ciba`

Backchannel Authentication Endpoint is used to initiate an out-of-band 
authentication of the end-user.

## Headers

- `x-client-certificate` string

## Response `200`

backchannel authentication response

- CibaResponse — backchannel authentication response
  - `auth_req_id` string, required — A unique identifier to identify the authentication request made by the Client.
  - `expires_in` number, required — Integer value indicating the expiration time of the "auth_req_id" in seconds since the authentication request was received.
  - `interval` number — Integer value indicating the minimum amount of time in seconds that the Client MUST wait between polling requests to the token endpoint.

## Other responses

- `400` — OAuth JSON error response

---

[API](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider.md) · [All operations](https://skmtc.net/ibm/apis/ibm-security-verify-access-oidc-provider/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ibm/ibm-security-verify-access-oidc-provider/versions/68cfc4d21b73/schema)