Skip to main content
POST
/
api
/
v1
/
auth
/
tls-cert-auth
/
login
cURL
curl --request POST \
  --url https://us.infisical.com/api/v1/auth/tls-cert-auth/login \
  --header 'Content-Type: application/json' \
  --data '
{
  "identityId": "<string>",
  "organizationSlug": "<string>"
}
'
{
  "accessToken": "<string>",
  "expiresIn": 123,
  "accessTokenMaxTTL": 123
}

Documentation Index

Fetch the complete documentation index at: https://infisical.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

Infisical US/EU and dedicated instances are deployed with AWS ALB. TLS Certificate Auth must flow through our ALB mTLS pass-through in order to authenticate. When you are authenticating with TLS Certificate Auth, you must use the port 8443 instead of the default 443. Example: https://app.infisical.com:8443/api/v1/auth/tls-cert-auth/login

Body

application/json
​
identityId
string
required

The ID of the machine identity to login.

​
organizationSlug
string

When set, this will scope the login session to the specified organization the machine identity has access to. If omitted, the session defaults to the organization where the machine identity was created in.

Required string length: 1 - 64

Response

Default Response

​
accessToken
string
required
​
expiresIn
number
required
​
accessTokenMaxTTL
number
required
​
tokenType
enum<string>
required
Available options:
Bearer