Token Exchange Grant Type

The Token Exchange grant type allows interoperability between PaaS/SaaS services and IaaS services by performing two-way conversions between IAM proof-of-possession (PoP) tokens and identity domain OAuth tokens. A principal that has an IAM PoP token or an API key can make a request to an endpoint that supports only OAuth, without needing any other credentials if already authenticated to OCI.

This section contains the following topics: