How-to Guides
Use these guides when you already know the task and want the practical steps without background reading. Each page focuses on one integration or operations job, with examples you can adapt to your own hostnames, clients, and scopes.
Available guides
- Configure CORS
- System Bootstrap Behavior
- React SDK Integration
- .NET API Integration
- Node Integration
- Authorization Code + PKCE
- Client Credentials
- Refresh Token
- Device Code
- Token Revocation
- Token Introspection
Example
curl -X POST https://id.example.com/token
The exact payload depends on the grant type. The flow-specific guides show the required fields and the parts you should change for your own Application registration.
Common Pitfalls
- Copying a confidential-client example into a browser-based client.
- Enabling a grant type for every Application instead of the smallest required set.
Troubleshooting
- Always verify the registered grant types, redirect URIs, and scopes for the Application before assuming a server bug.