Social Login
Logs an end user in with a Google ID token and returns their authentication token.
Only ID tokens issued by Google are accepted (issuer accounts.google.com). Tokens from any other identity provider are rejected with 401 “ID Token issued by unsupported issuer”. To use your own identity provider for end users, authenticate them in your application and use Delegated Login instead.
The user must have registered with Create Social Registration Challenge. DFNS matches the returning user by the token’s email claim (their DFNS username) and checks that its sub claim matches the Google account used at registration. The response contains only token.
Authentication
No authentication required.Required Permissions
No authentication required.Body
Social login provider used to issue the JWT.
Oidc JWT id token issued by the social login provider.
Organization id.
1 - 64^or-[a-z0-9]{5}-[a-z0-9]{5}-[a-z0-9]{14,16}$"or-30tnh-itmjs-s235s5ontr3r23h2"
Response
Success
Authentication token issued to the user.
Token expiration time in epoch milliseconds.
Decoded identity for the issued token. Populated for flows whose token is not a Dfns-minted JWT (e.g. OIDC passthrough) so clients can skip JWT decoding; absent on flows where the token's claims carry the same fields.