Endpoints and values
Sign-in uses the following endpoints and values. They are the same for every caller. The client ID is public and shared. The flow is protected by Proof Key for Code Exchange (PKCE), not a client secret, so there is no secret to hold.
| Item | Value |
|---|---|
Authorization endpoint |
|
Token endpoint |
|
Revocation endpoint |
|
Logout endpoint |
|
Builder ID sign-out endpoint |
|
Client ID |
|
Scope |
|
Identity provider |
|
Access token lifetime | 60 minutes |
Refresh token lifetime | 30 days |
Note
Always send identity_provider=AWSBuilderID on the authorization request. Without it, the
attendee sees an extra page that asks which provider to use. Builder ID is the only choice.
