Delegating Access

Caution

This feature is a technical preview for evaluation in non-production environments. A technical preview introduces new, limited functionality for customer feedback as we work on the feature. Details and functionality are subject to change. We cannot guarantee that data created as part of a technical preview will be retained after the feature is finalized.

The POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/delegate API is called to facilitate splitting up the user journey across more than a single device. This API returns a new authentication JWT that allows an entity to access a specified resource on behalf of the user authenticated in the original authentication JWT.

This API is used to delegate scoped access to Wrap/Unwrap to another entity when that entity needs to act on behalf of the user.

Request Parameters

Parameter	Type	Description
authentication	string	A JWT issued by a third party asserting who the user is.
authorization	string	A JWT with delegated_to and resource_name claims asserting that the entity identified by delegated_to claim is allowed to access resource_name on behalf of the user.
reason	string	A passthrough JSON string provides additional context about the operation. The JSON provided should be sanitized before being displayed.

Example Request

POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/wrap
{,
    "authorization": "eyJlbGciOiJSUzI1NiIsImtpZCI6IjNjYjkzNDNiNDMxOGE5ODgyYmVmMzU4ZmQzNzlmYTIzMWMyZGY1N2EiLCJ0eXAiOiJKV1QifQ.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.iyhF3naaEavjIkAL35UfA2f8IGMkwkeXWfhObkqozshPF0OobF5gD193FsXEKZs7CKJS-rIBttw466_7BugK_gyUl7jX6_z5NQ4454RjLIGf31hZvOH-eqWDIsW5Vcl9clwabpJqoVONX0mUv7bKxrToSvLWdfvTWvyEbWewQoJEjwIaGOr6a_7LVE7i7ldpTH1pTYRC40EYgc-U9_Bf_IylpK-EgDMqjFqXz7yJKFe4VflVtal5_a_ymwIgtASCLxQeXINfbNe9bzwV5A54kJXhAyQFysiraWQ8q3QWYbdwEsPuQWGHySH9meCwPrk0elbj9slCBGJkVs9efWSWVw",
    "authentication": "eyJlbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkhlVENRLW56eGJDM2x5ZFkxc0ZiMiJ9.eyJlbWFpbCI6ImRhbmlzaC1kZW8uam9oYXJpQHRoYWxlc2dzdWl0ZWludGVncmF0aW9uLm5ldCIsImVtYWlsX3ZlcmlmaWVkIjp0cnVlLCJpc3MiOiJodHRwczovL2Rldi1haHpjZTUwbC5hdXRoMC5jb20vIiwic3ViIjoiZ29vZ2xlLW9hdXRoMnwxMTgwOTA4NTU4MjE5ODYyODI3MzUiLCJhdWQiOiIxZU90Z001VmhXNktUWXB5M1Q0UGtpd2tMU1M1WXFjdSIsImlhdCI6MTYxNjA1OTU0MywiZXhwIjoxNjE2MDk1NTQzLCJub25jZSI6IjdVYmpwVk9Dd3Zha1Y3dVllckRvdHc6aHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tIn0.6l3gOSJWKAH0FRTLYplZ4Hk84_hN8Wf_yIj0W-Hr0LNeLUlJO3qb8ZsYtYwpirU_XHsAXSpu625FeGmTYLTsHuGk2IVivwvIoXti5YElEoKu7U74C8AZsYktLQwmITQqhlvhthk_RBNNd92A5Pzfa-uB5XTKiEWZaywnl-cBgXu-DIsy24cVOudyJLLoO9z57NVjWImsYBSF4hNLjj0t3YzK93heed_j6ogIOTl7Fx0gYa8_3JwJMS7eSgaG5MPIgQgWVQerROpY47cM3QakNUpX40yrEIJOrmcO5rFXX2NU8Bj-BGzKEHtMfka5DLofAVp4rvikL3szPAp91rUNBA",
    "reason": ""
}

Example Response

{
    "delegated_authentication": "eyJlbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkhlVENRLW56eGJDM2x5ZFkxc0ZiMiJ9.eyJlbWFpbCI6ImRhbmlzaC1kZW8uam9oYXJpQHRoYWxlc2dzdWl0ZWludGVncmF0aW9uLm5ldCIsImVtYWlsX3ZlcmlmaWVkIjp0cnVlLCJpc3MiOiJodHRwczovL2Rldi1haHpjZTUwbC5hdXRoMC5jb20vIiwic3ViIjoiZ29vZ2xlLW9hdXRoMnwxMTgwOTA4NTU4MjE5ODYyODI3MzUiLCJhdWQiOiIxZU90Z001VmhXNktUWXB5M1Q0UGtpd2tMU1M1WXFjdSIsImlhdCI6MTYxNjA1OTU0MywiZXhwIjoxNjE2MDk1NTQzLCJub25jZSI6IjdVYmpwVk9Dd3Zha1Y3dVllckRvdHc6aHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tIn0.6l3gOSJWKAH0FRTLYplZ4Hk84_hN8Wf_yIj0W-Hr0LNeLUlJO3qb8ZsYtYwpirU_XHsAXSpu625FeGmTYLTsHuGk2IVivwvIoXti5YElEoKu7U74C8AZsYktLQwmITQqhlvhthk_RBNNd92A5Pzfa-uB5XTKiEWZaywnl-cBgXu-DIsy24cVOudyJLLoO9z57NVjWImsYBSF4hNLjj0t3YzK93heed_j6ogIOTl7Fx0gYa8_3JwJMS7eSgaG5MPIgQgWVQerROpY47cM3QakNUpX40yrEIJOrmcO5rFXX2NU8Bj-BGzKEHtMfka5DLofAVp4rvikL3szPAp91rUNBA"
}

Response Codes

Response Code	Description
2xx	Success
4xx	Client errors

Refer to HTTP status codes for details.