---
title: "POST /access/v1/enrollment/authorize"
method: POST
path: "/access/v1/enrollment/authorize"
---

# POST /access/v1/enrollment/authorize

`POST /access/v1/enrollment/authorize`

Authenticate using application credentials and a specific owner ID, token, or enrollment.
(Only Applications!)

## Request body

- AccessAuthorizeEnrollment
  - `client_id` string — The ID of the application that is being enrolled.
  - `client_secret` string — The secret key of the application that is being enrolled.
  - `id` string — The ID of the enrollment to authorize to use as an alternative to the owner ID.
  - `owner_id` string — The ID of the entity that owns the enrollment. It is essential this is provided from a trusted source or an auth token is provided in the headers.

## Response `200`

OK

- AccessEnrollment
  - `app_id` string — ID of the application associated with the enrollment.
  - `created_at` string — The date and time the enrollment was created.
  - `data` unknown
  - `disabled` boolean — Whether the enrollment is disabled.
  - `id` string — UUID of the enrollment.
  - `owner_id` string — The ID of the entity that owns the enrollment.
  - `sandbox` boolean — Indicates if the enrollment's workspace is in a sandbox environment.
  - `token` string — A token that may be used to authenticate the enrollment with API operations.
  - `token_expires` integer — The expiration unix timestamp of the token.
  - `updated_at` string — The date and time the enrollment was last updated.

---

[API](https://skmtc.net/invopop/apis/access-service-api.md) · [All operations](https://skmtc.net/invopop/apis/access-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/invopop/access-service-api/versions/fc954f96ea62/schema)