Token Exchange

The Trust Domain Server exposes an /oauth/token endpoint that exchanges a credential a workload already holds for a different credential.

📄️Delegation

Delegation is a forward-looking feature and is off by default. Contact Defakto support to enable it for your organization. This capability is still evolving, and is not yet recommended for production use.

📄️OAuth Access Tokens

Exchange a JWT-SVID for an OAuth access token.