1. Backboard SSO
  2. Authorize
GET
/oauth/authorize
curl --request GET \
     --url https://app.backboard.io/api/oauth/authorize \
     --header 'X-API-Key: <api-key>'

​
Overview

Browser entry point for Login with Backboard. Redirect the user’s browser here to start OAuth.

For the full setup guide, PKCE, and callback handling, see SSO (Single Sign On).

This is a browser redirect endpoint, not a JSON API. Your server should send the user here with a 302 or client-side navigation — never call it from backend-only code expecting a JSON body.

​
Required query parameters

ParameterDescription
client_idYour OAuth App Key from the dashboard
redirect_uriMust exactly match a URI registered for the app
ParameterDescription
stateRandom string you verify on callback (CSRF protection)
scopeSpace-separated scopes (default openid)
code_challenge / code_challenge_methodPKCE — use S256 with code_challenge

​
Success

HTTP 302 to the Backboard consent UI, then back to your redirect_uri with ?code=...&state=... after approval.

​
Errors

HTTP 302 to your redirect_uri with error and error_description, or HTTP 400 JSON when redirect is not possible.

​
Authorizations

X-API-Key
required
string
API Key authentication

​
Query Parameters

client_id
required
string
redirect_uri
required
string
response_type
default:code
string
scope
default:openid
string
state
string
nonce
string
code_challenge
string
code_challenge_method
string