1. Backboard SSO
  2. Authorize

​
Overview

Browser entry point for Login with Backboard. Redirect the user’s browser here to start OAuth.

For the full setup guide, PKCE, and callback handling, see SSO (Single Sign On).

This is a browser redirect endpoint, not a JSON API. Your server should send the user here with a 302 or client-side navigation — never call it from backend-only code expecting a JSON body.

​
Required query parameters

ParameterDescription
client_idYour OAuth App Key from the dashboard
redirect_uriMust exactly match a URI registered for the app
ParameterDescription
stateRandom string you verify on callback (CSRF protection)
scopeSpace-separated scopes (default openid)
code_challenge / code_challenge_methodPKCE — use S256 with code_challenge

​
Success

HTTP 302 to the Backboard consent UI, then back to your redirect_uri with ?code=...&state=... after approval.

​
Errors

HTTP 302 to your redirect_uri with error and error_description, or HTTP 400 JSON when redirect is not possible.