{
  "info": {
    "_postman_id": "f463ed09-c1e7-4ef0-9f52-83c08372a611",
    "name": "ForgeRock Access Management Access Requests OAuth2 API",
    "description": "REST API for ForgeRock Access Management (AM) providing authentication, authorization, session management, and policy evaluation. Supports OAuth 2.0 and OpenID Connect flows, authentication trees/journeys, policy-based authorization decisions, and realm management.\n\nContact Support:\n Name: ForgeRock",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T01:41:47.000Z",
    "updatedAt": "2026-07-28T01:41:47.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-f463ed09-c1e7-4ef0-9f52-83c08372a611"
  },
  "item": [
    {
      "name": "oauth2",
      "item": [
        {
          "name": "realms",
          "item": [
            {
              "name": "root",
              "item": [
                {
                  "name": "realms",
                  "item": [
                    {
                      "name": "{realm}",
                      "item": [
                        {
                          "name": "authorize",
                          "item": [
                            {
                              "name": "ForgeRock OAuth 2.0 authorization endpoint",
                              "id": "d4b3abe5-fcf6-48f6-8d7f-184e6b05596c",
                              "protocolProfileBehavior": {
                                "disableBodyPruning": true
                              },
                              "request": {
                                "method": "GET",
                                "header": [
                                  {
                                    "key": "Accept",
                                    "value": "application/json"
                                  }
                                ],
                                "url": {
                                  "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=token&redirect_uri=<uri>&scope=<string>&state=<string>",
                                  "host": [
                                    "{{baseUrl}}"
                                  ],
                                  "path": [
                                    "oauth2",
                                    "realms",
                                    "root",
                                    "realms",
                                    ":realm",
                                    "authorize"
                                  ],
                                  "query": [
                                    {
                                      "description": "(Required) ",
                                      "key": "client_id",
                                      "value": "<string>"
                                    },
                                    {
                                      "description": "(Required) ",
                                      "key": "response_type",
                                      "value": "token"
                                    },
                                    {
                                      "description": "(Required) ",
                                      "key": "redirect_uri",
                                      "value": "<uri>"
                                    },
                                    {
                                      "key": "scope",
                                      "value": "<string>"
                                    },
                                    {
                                      "key": "state",
                                      "value": "<string>"
                                    }
                                  ],
                                  "variable": [
                                    {
                                      "id": "46fea19b-7d88-473f-a049-e53d270d7b37",
                                      "key": "realm",
                                      "value": "root",
                                      "description": "(Required) The realm name"
                                    }
                                  ]
                                },
                                "description": "Initiates an OAuth 2.0 authorization code or implicit grant flow. Redirects the user agent to authenticate and consent."
                              },
                              "response": [
                                {
                                  "id": "0ae83fa3-e109-41f1-9ed3-3d0eb30b63b4",
                                  "name": "Redirect to login or consent",
                                  "originalRequest": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=token&redirect_uri=<uri>&scope=<string>&state=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "authorize"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) ",
                                          "key": "client_id",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "(Required) ",
                                          "key": "response_type",
                                          "value": "token"
                                        },
                                        {
                                          "description": "(Required) ",
                                          "key": "redirect_uri",
                                          "value": "<uri>"
                                        },
                                        {
                                          "key": "scope",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "state",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "Found",
                                  "code": 302,
                                  "_postman_previewlanguage": "text",
                                  "header": [],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": null,
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-0ae83fa3-e109-41f1-9ed3-3d0eb30b63b4"
                                },
                                {
                                  "id": "fe3396d6-c766-4c26-aa74-69def1e7e229",
                                  "name": "Invalid request",
                                  "originalRequest": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      },
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=token&redirect_uri=<uri>&scope=<string>&state=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "authorize"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) ",
                                          "key": "client_id",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "(Required) ",
                                          "key": "response_type",
                                          "value": "token"
                                        },
                                        {
                                          "description": "(Required) ",
                                          "key": "redirect_uri",
                                          "value": "<uri>"
                                        },
                                        {
                                          "key": "scope",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "state",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "Bad Request",
                                  "code": 400,
                                  "_postman_previewlanguage": "json",
                                  "header": [
                                    {
                                      "key": "Content-Type",
                                      "value": "application/json"
                                    }
                                  ],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": "{\n  \"error\": \"<string>\",\n  \"error_description\": \"<string>\"\n}",
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-fe3396d6-c766-4c26-aa74-69def1e7e229"
                                }
                              ],
                              "createdAt": "2026-07-28T01:41:48.000Z",
                              "updatedAt": "2026-07-28T01:41:48.000Z",
                              "uid": "35240-d4b3abe5-fcf6-48f6-8d7f-184e6b05596c"
                            }
                          ],
                          "id": "2396bd47-62f8-422e-9ddc-4cb061951034",
                          "createdAt": "2026-07-28T01:41:47.000Z",
                          "updatedAt": "2026-07-28T01:41:47.000Z",
                          "uid": "35240-2396bd47-62f8-422e-9ddc-4cb061951034"
                        },
                        {
                          "name": "access_token",
                          "item": [
                            {
                              "name": "ForgeRock OAuth 2.0 token endpoint",
                              "id": "931fef35-0c8d-45a7-ae10-e7f866092408",
                              "protocolProfileBehavior": {
                                "disableBodyPruning": true
                              },
                              "request": {
                                "method": "POST",
                                "header": [
                                  {
                                    "key": "Content-Type",
                                    "value": "application/x-www-form-urlencoded"
                                  },
                                  {
                                    "key": "Accept",
                                    "value": "application/json"
                                  }
                                ],
                                "body": {
                                  "mode": "urlencoded",
                                  "urlencoded": [
                                    {
                                      "description": "(Required) ",
                                      "key": "grant_type",
                                      "value": "authorization_code"
                                    },
                                    {
                                      "key": "code",
                                      "value": "<string>"
                                    },
                                    {
                                      "key": "redirect_uri",
                                      "value": "<string>"
                                    },
                                    {
                                      "key": "refresh_token",
                                      "value": "<string>"
                                    },
                                    {
                                      "key": "scope",
                                      "value": "<string>"
                                    }
                                  ]
                                },
                                "url": {
                                  "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/access_token",
                                  "host": [
                                    "{{baseUrl}}"
                                  ],
                                  "path": [
                                    "oauth2",
                                    "realms",
                                    "root",
                                    "realms",
                                    ":realm",
                                    "access_token"
                                  ],
                                  "variable": [
                                    {
                                      "id": "658b0f0c-10ad-4718-b3ed-74b0ef30d412",
                                      "key": "realm",
                                      "value": "root",
                                      "description": "(Required) The realm name"
                                    }
                                  ]
                                },
                                "description": "Exchange credentials for access tokens. Supports authorization_code, client_credentials, refresh_token, password, and device_code grants."
                              },
                              "response": [
                                {
                                  "id": "00b51e2c-d813-45a9-aba7-ecf8df8c2a38",
                                  "name": "Access token response",
                                  "originalRequest": {
                                    "method": "POST",
                                    "header": [
                                      {
                                        "key": "Content-Type",
                                        "value": "application/x-www-form-urlencoded"
                                      },
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      },
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "body": {
                                      "mode": "urlencoded",
                                      "urlencoded": [
                                        {
                                          "description": "(Required) ",
                                          "key": "grant_type",
                                          "value": "authorization_code"
                                        },
                                        {
                                          "key": "code",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "redirect_uri",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "refresh_token",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "scope",
                                          "value": "<string>"
                                        }
                                      ]
                                    },
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/access_token",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "access_token"
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "OK",
                                  "code": 200,
                                  "_postman_previewlanguage": "json",
                                  "header": [
                                    {
                                      "key": "Content-Type",
                                      "value": "application/json"
                                    }
                                  ],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": "{\n  \"access_token\": \"<string>\",\n  \"token_type\": \"<string>\",\n  \"expires_in\": \"<integer>\",\n  \"refresh_token\": \"<string>\",\n  \"scope\": \"<string>\",\n  \"id_token\": \"<string>\"\n}",
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-00b51e2c-d813-45a9-aba7-ecf8df8c2a38"
                                },
                                {
                                  "id": "c09e9999-c84f-498e-956a-fa804a9a4bd8",
                                  "name": "Invalid grant",
                                  "originalRequest": {
                                    "method": "POST",
                                    "header": [
                                      {
                                        "key": "Content-Type",
                                        "value": "application/x-www-form-urlencoded"
                                      },
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      },
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "body": {
                                      "mode": "urlencoded",
                                      "urlencoded": [
                                        {
                                          "description": "(Required) ",
                                          "key": "grant_type",
                                          "value": "authorization_code"
                                        },
                                        {
                                          "key": "code",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "redirect_uri",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "refresh_token",
                                          "value": "<string>"
                                        },
                                        {
                                          "key": "scope",
                                          "value": "<string>"
                                        }
                                      ]
                                    },
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/access_token",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "access_token"
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "Bad Request",
                                  "code": 400,
                                  "_postman_previewlanguage": "json",
                                  "header": [
                                    {
                                      "key": "Content-Type",
                                      "value": "application/json"
                                    }
                                  ],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": "{\n  \"error\": \"<string>\",\n  \"error_description\": \"<string>\"\n}",
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-c09e9999-c84f-498e-956a-fa804a9a4bd8"
                                }
                              ],
                              "createdAt": "2026-07-28T01:41:48.000Z",
                              "updatedAt": "2026-07-28T01:41:48.000Z",
                              "uid": "35240-931fef35-0c8d-45a7-ae10-e7f866092408"
                            }
                          ],
                          "id": "139b22a8-ffd4-4fcf-863a-2ed204f03659",
                          "createdAt": "2026-07-28T01:41:47.000Z",
                          "updatedAt": "2026-07-28T01:41:47.000Z",
                          "uid": "35240-139b22a8-ffd4-4fcf-863a-2ed204f03659"
                        },
                        {
                          "name": "tokeninfo",
                          "item": [
                            {
                              "name": "ForgeRock OAuth 2.0 token introspection",
                              "id": "54f5a582-d127-4028-8649-f142a2ad7ca5",
                              "protocolProfileBehavior": {
                                "disableBodyPruning": true
                              },
                              "request": {
                                "method": "GET",
                                "header": [
                                  {
                                    "key": "Accept",
                                    "value": "application/json"
                                  }
                                ],
                                "url": {
                                  "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/tokeninfo?access_token=<string>",
                                  "host": [
                                    "{{baseUrl}}"
                                  ],
                                  "path": [
                                    "oauth2",
                                    "realms",
                                    "root",
                                    "realms",
                                    ":realm",
                                    "tokeninfo"
                                  ],
                                  "query": [
                                    {
                                      "description": "(Required) The access token to introspect",
                                      "key": "access_token",
                                      "value": "<string>"
                                    }
                                  ],
                                  "variable": [
                                    {
                                      "id": "3e2f4390-8537-4830-bd95-0acfae9ebe92",
                                      "key": "realm",
                                      "value": "root",
                                      "description": "(Required) The realm name"
                                    }
                                  ]
                                },
                                "description": "Retrieve information about an access token including its scope, expiration, and associated client."
                              },
                              "response": [
                                {
                                  "id": "c9aee85f-8521-4842-8a52-cec052fe5018",
                                  "name": "Token information",
                                  "originalRequest": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      },
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/tokeninfo?access_token=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "tokeninfo"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) The access token to introspect",
                                          "key": "access_token",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "OK",
                                  "code": 200,
                                  "_postman_previewlanguage": "json",
                                  "header": [
                                    {
                                      "key": "Content-Type",
                                      "value": "application/json"
                                    }
                                  ],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": "{\n  \"access_token\": \"<string>\",\n  \"grant_type\": \"<string>\",\n  \"scope\": [\n    \"<string>\",\n    \"<string>\"\n  ],\n  \"realm\": \"<string>\",\n  \"token_type\": \"<string>\",\n  \"expires_in\": \"<integer>\",\n  \"client_id\": \"<string>\"\n}",
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-c9aee85f-8521-4842-8a52-cec052fe5018"
                                },
                                {
                                  "id": "d127dfe9-3124-4274-a3e0-988c704d18c9",
                                  "name": "Invalid or expired token",
                                  "originalRequest": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      },
                                      {
                                        "description": "Added as a part of security scheme: apikey",
                                        "key": "iPlanetDirectoryPro",
                                        "value": "<API Key>"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/oauth2/realms/root/realms/:realm/tokeninfo?access_token=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "tokeninfo"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) The access token to introspect",
                                          "key": "access_token",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "key": "realm"
                                        }
                                      ]
                                    }
                                  },
                                  "status": "Unauthorized",
                                  "code": 401,
                                  "_postman_previewlanguage": "json",
                                  "header": [
                                    {
                                      "key": "Content-Type",
                                      "value": "application/json"
                                    }
                                  ],
                                  "cookie": [],
                                  "responseTime": null,
                                  "body": "{\n  \"error\": \"<string>\",\n  \"error_description\": \"<string>\"\n}",
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-d127dfe9-3124-4274-a3e0-988c704d18c9"
                                }
                              ],
                              "createdAt": "2026-07-28T01:41:48.000Z",
                              "updatedAt": "2026-07-28T01:41:48.000Z",
                              "uid": "35240-54f5a582-d127-4028-8649-f142a2ad7ca5"
                            }
                          ],
                          "id": "235d7481-69e8-4cba-a080-70b2c4fb214c",
                          "createdAt": "2026-07-28T01:41:47.000Z",
                          "updatedAt": "2026-07-28T01:41:47.000Z",
                          "uid": "35240-235d7481-69e8-4cba-a080-70b2c4fb214c"
                        }
                      ],
                      "id": "832188f0-9066-413b-b0af-71664d00f643",
                      "createdAt": "2026-07-28T01:41:47.000Z",
                      "updatedAt": "2026-07-28T01:41:47.000Z",
                      "uid": "35240-832188f0-9066-413b-b0af-71664d00f643"
                    }
                  ],
                  "id": "c637a47d-761c-4495-8df9-1b68ea5db7c9",
                  "createdAt": "2026-07-28T01:41:47.000Z",
                  "updatedAt": "2026-07-28T01:41:47.000Z",
                  "uid": "35240-c637a47d-761c-4495-8df9-1b68ea5db7c9"
                }
              ],
              "id": "36ac0208-c0df-4f10-9b35-89a538e66d96",
              "createdAt": "2026-07-28T01:41:47.000Z",
              "updatedAt": "2026-07-28T01:41:47.000Z",
              "uid": "35240-36ac0208-c0df-4f10-9b35-89a538e66d96"
            }
          ],
          "id": "5565c1ea-bc4a-4252-9a17-5ded537f78fb",
          "createdAt": "2026-07-28T01:41:47.000Z",
          "updatedAt": "2026-07-28T01:41:47.000Z",
          "uid": "35240-5565c1ea-bc4a-4252-9a17-5ded537f78fb"
        }
      ],
      "id": "0b8b5493-0224-4236-951c-731760fbc50e",
      "createdAt": "2026-07-28T01:41:47.000Z",
      "updatedAt": "2026-07-28T01:41:47.000Z",
      "uid": "35240-0b8b5493-0224-4236-951c-731760fbc50e"
    }
  ],
  "auth": {
    "type": "apikey",
    "apikey": [
      {
        "key": "key",
        "value": "iPlanetDirectoryPro",
        "type": "string"
      },
      {
        "key": "value",
        "value": "{{apiKey}}",
        "type": "string"
      },
      {
        "key": "in",
        "value": "header",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "deployment",
      "value": "am.example.com"
    },
    {
      "key": "baseUrl",
      "value": "https://{{deployment}}/am"
    }
  ]
}