Skip to main content

issueEnrollmentToken

Issue a single-use, expiring enrollment token for targetUserID. The caller must already be able to open the org KW (their own per-user passphrase credential). Returns the opaque token plaintext EXACTLY ONCE — hand it to the target member out-of-band; they redeem it (P3) to establish their own passphrase credential. The server never sets or sees the target's passphrase.

issueEnrollmentToken(
  orgID: String!
  targetUserID: String!
): String!

Arguments​

issueEnrollmentToken.orgID ● String! non-null scalar​

Keycloak organization alias.

issueEnrollmentToken.targetUserID ● String! non-null scalar​

The member who will redeem this token to enroll their own credential.

Type​

String scalar​

The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.