PingOne Platform APIs

Task 3: Test The Workflow

The Test the Workflow endpoints perform the following actions:

  • Send an authorization request.

  • Perform any sign-on actions.

  • Return an access token.

The authorization and token endpoints that you’ll call to test the workflow require an application ID to complete the sign-on action. The Postman uses the ID from the application you created in the Configure Your Environment collection.

What you’ll do

You will complete a sign-on flow that uses Proof Key for Code Exchange (PKCE) authorization to protect public clients.

  • POST request to the authorize endpoint that includes the code_challenge and code_challenge_method values.

  • POST request to submit the user’s login credentials.

  • POST request to the token endpoint that includes the code_verifier value to authenticate the request.

If you choose to use an alternate application, be aware that the variables in the Postman collections point to the application ID that you created in the Environment Configuration collection. You must change this value manually either in your Postman environment or in the endpoint’s URL or parameters to run the requests using your alternate application.

Run in Postman