---
title: "Exchange OIDC ID token for ephemeral service account access token"
method: POST
path: "/service-accounts/assume"
tags: ["access-tokens-public"]
---

# Exchange OIDC ID token for ephemeral service account access token

`POST /service-accounts/assume`

This endpoint creates service account's access token.

## Request body

- AssumeServiceAccountRequest — An assume service account request.
  - `id-token` string, required
  - `lifetime` integer
  - `service-account-email` string, required

## Response `200`

Successfully exchanged.

- ServiceAccountTemporaryToken
  - `access-token` string
  - `expire-time` string, date-time

## Other responses

- `401` — Service account not found, or identity unauthorized to perform action.
- `4XX` — Client error.
- `5XX` — Server error.

---

[API](https://skmtc.net/scalr/apis/scalr-iacp-api.md) · [All operations](https://skmtc.net/scalr/apis/scalr-iacp-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scalr/scalr-iacp-api/revisions/fc927526ad12/schema)