API Explorer

Cross-Device Authorization

Cross-device authorization flows enable a user to initiate an authorization flow on one device (the Consumption Device) and then use a second, personally trusted, device (Authorization Device) to authorize the Consumption Device to access a resource (e.g., access to a service). Two examples of popular cross-device authorization flows are:

  • The Device Authorization Grant RFC8628
  • Client-Initiated Backchannel Authentication CIBA