Approve a tenant authorization handoff on the central Admin origin.

POST

/api/admin/agent-login-handoffs/{id}/approve

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/agent-login-handoffs/example/approve \
  --cookie authrim_admin_session=<authrim_admin_session>

Requires a host-only central Admin session with fresh MFA and admin:agent:use. The server re-evaluates live RBAC for the handoff’s stored target tenant, rejects derived sessions as approval sources, and atomically issues a code valid for at most 60 seconds. Only the exact HTTPS tenant consume URL is returned; the Admin session credential never crosses origins.

Authorizations

• adminSessionCookie

Parameters

Path Parameters

id

required

string

/^alh_[A-Za-z0-9_-]{32}$/

Responses

200

Exact tenant consume URL carrying a one-time code.

Media type application/json

object

consume_url

required

string format: uri

key

additional properties

Example ^generated

{
  "consume_url": "https://example.com"
}

Headers

Cache-Control

string

Always no-store.

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

410

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}