This endpoint exchanges a Social Identity Provider OAuth token, or an IDP token for an Identity Cloud Social Login token, which will be needed for social registration and login calls using Akamai's OAuth endpoints. This endpoint would be used if you are implementing a solution that authenticates users with an Identity Provider directly and not using a Social Login application.

The only providers that support this endpoint are Facebook and Twitter.

Accepted Content-types

  • application/x-www-form-urlencoded
  • multipart/form-data

This endpoint includes the following methods:

  • POST



No authentication is required to call the /signin/oauth_token endpoint.

Base URL

The base URL for this endpoint is your application domain followed by /api/v2; for example:


You can find your application domain in the Social Login (Engage Dashboard) on the Settings page:

Example Request

This command exchanges a sign-in token obtained from Facebook for an Identity Cloud social login token. The social login token can then be used for social registration and login calls by using Akamai's OAuth endpoints.

curl -X POST \
 'https://greg-stemp.rpxnow.com/signin/oauth_token?providername=facebook' \
 -H 'Content-Type: application/json' \
 -d '{
   "token": "EAAV6lsQIR0gBAItAtDeUZBbsFiHuTxhLaHLw9TqGDsXK6GQodDfgKXcCkxkZCZBxLKsxsWgV0iZATVAzx2RGlsOIFDIals3ZCblCEJn25pTj4Lk7XZCCEweKkHfHZBPP8B75dXc1BagGjNy8ZBpyObZB8FZCWSK0AAWevv15aEh85lTwZZDD"

      Running this command in Postman

Example Response


Request Parameters

These items are used in the BODY parameter of your API call:

Parameter Type Required Description
token string Yes IDP token from Facebook or Twitter.
provider string Yes Social identity provider. Allowed values are:
  • facebook
  • ​twitter
  • googleplus

Note that, despite the name, the provider parameter does not reference any Google+ endpoints or scopes; the Akamai Identity Cloud no longer supports Google+. Instead, all Google social logins are made through Google Sign-In. The name googleplus has been retained for backwards compatibility.

token-secret string Required when using Twitter as the social login identity provider.