{
  "info": {
    "_postman_id": "0b21658d-0fa2-4aba-aa69-6e41f703ecb3",
    "name": "ForgeRock Access Management Access Requests OAuth2 Clients API",
    "description": "REST API for ForgeRock Access Management (AM) providing authentication, authorization, session management, and policy evaluation. Supports OAuth 2.0 and OpenID Connect flows, authentication trees/journeys, policy-based authorization decisions, and realm management.\n\nContact Support:\n Name: ForgeRock",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T01:41:48.000Z",
    "updatedAt": "2026-07-28T01:41:48.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-0b21658d-0fa2-4aba-aa69-6e41f703ecb3"
  },
  "item": [
    {
      "name": "am",
      "item": [
        {
          "name": "oauth2",
          "item": [
            {
              "name": "realms",
              "item": [
                {
                  "name": "root",
                  "item": [
                    {
                      "name": "realms",
                      "item": [
                        {
                          "name": "{realm}",
                          "item": [
                            {
                              "name": "authorize",
                              "item": [
                                {
                                  "name": "ForgeRock OAuth 2.0 authorization endpoint",
                                  "id": "441a8418-8a8c-4fcf-a7c1-e590974395df",
                                  "protocolProfileBehavior": {
                                    "disableBodyPruning": true
                                  },
                                  "request": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=code&redirect_uri=<uri>&scope=<string>&state=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "am",
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "authorize"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) The OAuth 2.0 client identifier",
                                          "key": "client_id",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "(Required) The OAuth 2.0 response type",
                                          "key": "response_type",
                                          "value": "code"
                                        },
                                        {
                                          "description": "(Required) The URI to redirect to after authorization",
                                          "key": "redirect_uri",
                                          "value": "<uri>"
                                        },
                                        {
                                          "description": "Space-delimited list of requested scopes",
                                          "key": "scope",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Opaque value to maintain state between request and callback",
                                          "key": "state",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "id": "9cd92b8e-3809-4778-adfb-4a22aa8a50e1",
                                          "key": "realm",
                                          "value": "alpha",
                                          "description": "(Required) The realm name (e.g., alpha, bravo)"
                                        }
                                      ]
                                    },
                                    "description": "Initiates an OAuth 2.0 authorization flow. Redirects the user agent to the authorization server for authentication and consent."
                                  },
                                  "response": [
                                    {
                                      "id": "526421a4-e843-4956-beed-cc8825bd2882",
                                      "name": "Redirect to login or consent page",
                                      "originalRequest": {
                                        "method": "GET",
                                        "header": [
                                          {
                                            "description": "Added as a part of security scheme: apikey",
                                            "key": "iPlanetDirectoryPro",
                                            "value": "<API Key>"
                                          }
                                        ],
                                        "url": {
                                          "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=code&redirect_uri=<uri>&scope=<string>&state=<string>",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "am",
                                            "oauth2",
                                            "realms",
                                            "root",
                                            "realms",
                                            ":realm",
                                            "authorize"
                                          ],
                                          "query": [
                                            {
                                              "description": "(Required) The OAuth 2.0 client identifier",
                                              "key": "client_id",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "(Required) The OAuth 2.0 response type",
                                              "key": "response_type",
                                              "value": "code"
                                            },
                                            {
                                              "description": "(Required) The URI to redirect to after authorization",
                                              "key": "redirect_uri",
                                              "value": "<uri>"
                                            },
                                            {
                                              "description": "Space-delimited list of requested scopes",
                                              "key": "scope",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Opaque value to maintain state between request and callback",
                                              "key": "state",
                                              "value": "<string>"
                                            }
                                          ],
                                          "variable": [
                                            {
                                              "key": "realm"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "Found",
                                      "code": 302,
                                      "_postman_previewlanguage": "text",
                                      "header": [],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": null,
                                      "createdAt": "2026-07-28T01:41:49.000Z",
                                      "updatedAt": "2026-07-28T01:41:49.000Z",
                                      "uid": "35240-526421a4-e843-4956-beed-cc8825bd2882"
                                    },
                                    {
                                      "id": "b131dd67-5d3f-4516-a9e8-09ce5a9c513e",
                                      "name": "Invalid request",
                                      "originalRequest": {
                                        "method": "GET",
                                        "header": [
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: apikey",
                                            "key": "iPlanetDirectoryPro",
                                            "value": "<API Key>"
                                          }
                                        ],
                                        "url": {
                                          "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/authorize?client_id=<string>&response_type=code&redirect_uri=<uri>&scope=<string>&state=<string>",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "am",
                                            "oauth2",
                                            "realms",
                                            "root",
                                            "realms",
                                            ":realm",
                                            "authorize"
                                          ],
                                          "query": [
                                            {
                                              "description": "(Required) The OAuth 2.0 client identifier",
                                              "key": "client_id",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "(Required) The OAuth 2.0 response type",
                                              "key": "response_type",
                                              "value": "code"
                                            },
                                            {
                                              "description": "(Required) The URI to redirect to after authorization",
                                              "key": "redirect_uri",
                                              "value": "<uri>"
                                            },
                                            {
                                              "description": "Space-delimited list of requested scopes",
                                              "key": "scope",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Opaque value to maintain state between request and callback",
                                              "key": "state",
                                              "value": "<string>"
                                            }
                                          ],
                                          "variable": [
                                            {
                                              "key": "realm"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "Bad Request",
                                      "code": 400,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"code\": \"<integer>\",\n  \"reason\": \"<string>\",\n  \"message\": \"<string>\"\n}",
                                      "createdAt": "2026-07-28T01:41:49.000Z",
                                      "updatedAt": "2026-07-28T01:41:49.000Z",
                                      "uid": "35240-b131dd67-5d3f-4516-a9e8-09ce5a9c513e"
                                    }
                                  ],
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-441a8418-8a8c-4fcf-a7c1-e590974395df"
                                }
                              ],
                              "id": "12f2155d-6433-49fc-a2e6-1815e62dac8f",
                              "createdAt": "2026-07-28T01:41:48.000Z",
                              "updatedAt": "2026-07-28T01:41:48.000Z",
                              "uid": "35240-12f2155d-6433-49fc-a2e6-1815e62dac8f"
                            },
                            {
                              "name": "access_token",
                              "item": [
                                {
                                  "name": "ForgeRock OAuth 2.0 token endpoint",
                                  "id": "081fb255-44f5-49c9-b794-04bd3c77dcb3",
                                  "protocolProfileBehavior": {
                                    "disableBodyPruning": true
                                  },
                                  "request": {
                                    "method": "POST",
                                    "header": [
                                      {
                                        "key": "Content-Type",
                                        "value": "application/x-www-form-urlencoded"
                                      },
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      }
                                    ],
                                    "body": {
                                      "mode": "urlencoded",
                                      "urlencoded": [
                                        {
                                          "description": "(Required) The OAuth 2.0 grant type",
                                          "key": "grant_type",
                                          "value": "authorization_code"
                                        },
                                        {
                                          "description": "Authorization code (for authorization_code grant)",
                                          "key": "code",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Redirect URI (must match the authorization request)",
                                          "key": "redirect_uri",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Refresh token (for refresh_token grant)",
                                          "key": "refresh_token",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Requested scopes",
                                          "key": "scope",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Resource owner username (for password grant)",
                                          "key": "username",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Resource owner password (for password grant)",
                                          "key": "password",
                                          "value": "<string>"
                                        }
                                      ]
                                    },
                                    "url": {
                                      "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/access_token",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "am",
                                        "oauth2",
                                        "realms",
                                        "root",
                                        "realms",
                                        ":realm",
                                        "access_token"
                                      ],
                                      "variable": [
                                        {
                                          "id": "f05224f3-66fd-46a6-8c16-07cd2da07b64",
                                          "key": "realm",
                                          "value": "alpha",
                                          "description": "(Required) The realm name (e.g., alpha, bravo)"
                                        }
                                      ]
                                    },
                                    "description": "Exchange an authorization code, refresh token, or client credentials for an access token."
                                  },
                                  "response": [
                                    {
                                      "id": "5cababec-6a9b-417e-9794-501eb8208012",
                                      "name": "Token response",
                                      "originalRequest": {
                                        "method": "POST",
                                        "header": [
                                          {
                                            "key": "Content-Type",
                                            "value": "application/x-www-form-urlencoded"
                                          },
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: apikey",
                                            "key": "iPlanetDirectoryPro",
                                            "value": "<API Key>"
                                          }
                                        ],
                                        "body": {
                                          "mode": "urlencoded",
                                          "urlencoded": [
                                            {
                                              "description": "(Required) The OAuth 2.0 grant type",
                                              "key": "grant_type",
                                              "value": "authorization_code"
                                            },
                                            {
                                              "description": "Authorization code (for authorization_code grant)",
                                              "key": "code",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Redirect URI (must match the authorization request)",
                                              "key": "redirect_uri",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Refresh token (for refresh_token grant)",
                                              "key": "refresh_token",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Requested scopes",
                                              "key": "scope",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner username (for password grant)",
                                              "key": "username",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner password (for password grant)",
                                              "key": "password",
                                              "value": "<string>"
                                            }
                                          ]
                                        },
                                        "url": {
                                          "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/access_token",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "am",
                                            "oauth2",
                                            "realms",
                                            "root",
                                            "realms",
                                            ":realm",
                                            "access_token"
                                          ],
                                          "variable": [
                                            {
                                              "key": "realm"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "OK",
                                      "code": 200,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"access_token\": \"<string>\",\n  \"token_type\": \"<string>\",\n  \"expires_in\": \"<integer>\",\n  \"refresh_token\": \"<string>\",\n  \"scope\": \"<string>\",\n  \"id_token\": \"<string>\"\n}",
                                      "createdAt": "2026-07-28T01:41:49.000Z",
                                      "updatedAt": "2026-07-28T01:41:49.000Z",
                                      "uid": "35240-5cababec-6a9b-417e-9794-501eb8208012"
                                    },
                                    {
                                      "id": "b5177499-7d46-4793-8d5c-27c2a606caa1",
                                      "name": "Invalid grant or request",
                                      "originalRequest": {
                                        "method": "POST",
                                        "header": [
                                          {
                                            "key": "Content-Type",
                                            "value": "application/x-www-form-urlencoded"
                                          },
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: apikey",
                                            "key": "iPlanetDirectoryPro",
                                            "value": "<API Key>"
                                          }
                                        ],
                                        "body": {
                                          "mode": "urlencoded",
                                          "urlencoded": [
                                            {
                                              "description": "(Required) The OAuth 2.0 grant type",
                                              "key": "grant_type",
                                              "value": "authorization_code"
                                            },
                                            {
                                              "description": "Authorization code (for authorization_code grant)",
                                              "key": "code",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Redirect URI (must match the authorization request)",
                                              "key": "redirect_uri",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Refresh token (for refresh_token grant)",
                                              "key": "refresh_token",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Requested scopes",
                                              "key": "scope",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner username (for password grant)",
                                              "key": "username",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner password (for password grant)",
                                              "key": "password",
                                              "value": "<string>"
                                            }
                                          ]
                                        },
                                        "url": {
                                          "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/access_token",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "am",
                                            "oauth2",
                                            "realms",
                                            "root",
                                            "realms",
                                            ":realm",
                                            "access_token"
                                          ],
                                          "variable": [
                                            {
                                              "key": "realm"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "Bad Request",
                                      "code": 400,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"error\": \"<string>\",\n  \"error_description\": \"<string>\"\n}",
                                      "createdAt": "2026-07-28T01:41:49.000Z",
                                      "updatedAt": "2026-07-28T01:41:49.000Z",
                                      "uid": "35240-b5177499-7d46-4793-8d5c-27c2a606caa1"
                                    },
                                    {
                                      "id": "639e3fa7-c26c-4721-ae12-81b9a673d968",
                                      "name": "Invalid client credentials",
                                      "originalRequest": {
                                        "method": "POST",
                                        "header": [
                                          {
                                            "key": "Content-Type",
                                            "value": "application/x-www-form-urlencoded"
                                          },
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: apikey",
                                            "key": "iPlanetDirectoryPro",
                                            "value": "<API Key>"
                                          }
                                        ],
                                        "body": {
                                          "mode": "urlencoded",
                                          "urlencoded": [
                                            {
                                              "description": "(Required) The OAuth 2.0 grant type",
                                              "key": "grant_type",
                                              "value": "authorization_code"
                                            },
                                            {
                                              "description": "Authorization code (for authorization_code grant)",
                                              "key": "code",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Redirect URI (must match the authorization request)",
                                              "key": "redirect_uri",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Refresh token (for refresh_token grant)",
                                              "key": "refresh_token",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Requested scopes",
                                              "key": "scope",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner username (for password grant)",
                                              "key": "username",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Resource owner password (for password grant)",
                                              "key": "password",
                                              "value": "<string>"
                                            }
                                          ]
                                        },
                                        "url": {
                                          "raw": "{{baseUrl}}/am/oauth2/realms/root/realms/:realm/access_token",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "am",
                                            "oauth2",
                                            "realms",
                                            "root",
                                            "realms",
                                            ":realm",
                                            "access_token"
                                          ],
                                          "variable": [
                                            {
                                              "key": "realm"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "Unauthorized",
                                      "code": 401,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"error\": \"<string>\",\n  \"error_description\": \"<string>\"\n}",
                                      "createdAt": "2026-07-28T01:41:49.000Z",
                                      "updatedAt": "2026-07-28T01:41:49.000Z",
                                      "uid": "35240-639e3fa7-c26c-4721-ae12-81b9a673d968"
                                    }
                                  ],
                                  "createdAt": "2026-07-28T01:41:48.000Z",
                                  "updatedAt": "2026-07-28T01:41:48.000Z",
                                  "uid": "35240-081fb255-44f5-49c9-b794-04bd3c77dcb3"
                                }
                              ],
                              "id": "6b027b66-38bf-4498-bc00-773ac625a63a",
                              "createdAt": "2026-07-28T01:41:48.000Z",
                              "updatedAt": "2026-07-28T01:41:48.000Z",
                              "uid": "35240-6b027b66-38bf-4498-bc00-773ac625a63a"
                            }
                          ],
                          "id": "05132636-b41c-4085-ae03-bcbca4e3a8c0",
                          "createdAt": "2026-07-28T01:41:48.000Z",
                          "updatedAt": "2026-07-28T01:41:48.000Z",
                          "uid": "35240-05132636-b41c-4085-ae03-bcbca4e3a8c0"
                        }
                      ],
                      "id": "865444da-a8b8-4876-9ef8-70e312b4bb84",
                      "createdAt": "2026-07-28T01:41:48.000Z",
                      "updatedAt": "2026-07-28T01:41:48.000Z",
                      "uid": "35240-865444da-a8b8-4876-9ef8-70e312b4bb84"
                    }
                  ],
                  "id": "44de456d-7e6c-4ed7-83ec-5650036404cf",
                  "createdAt": "2026-07-28T01:41:48.000Z",
                  "updatedAt": "2026-07-28T01:41:48.000Z",
                  "uid": "35240-44de456d-7e6c-4ed7-83ec-5650036404cf"
                }
              ],
              "id": "ef1fca00-0ae8-4eda-9bb3-0489bac4522d",
              "createdAt": "2026-07-28T01:41:48.000Z",
              "updatedAt": "2026-07-28T01:41:48.000Z",
              "uid": "35240-ef1fca00-0ae8-4eda-9bb3-0489bac4522d"
            }
          ],
          "id": "270cc025-741a-4a7a-ba16-41f3dc67fd95",
          "createdAt": "2026-07-28T01:41:48.000Z",
          "updatedAt": "2026-07-28T01:41:48.000Z",
          "uid": "35240-270cc025-741a-4a7a-ba16-41f3dc67fd95"
        }
      ],
      "id": "359eef5f-00bf-4976-acb6-a673034a6520",
      "createdAt": "2026-07-28T01:41:48.000Z",
      "updatedAt": "2026-07-28T01:41:48.000Z",
      "uid": "35240-359eef5f-00bf-4976-acb6-a673034a6520"
    }
  ],
  "auth": {
    "type": "apikey",
    "apikey": [
      {
        "key": "key",
        "value": "iPlanetDirectoryPro",
        "type": "string"
      },
      {
        "key": "value",
        "value": "{{apiKey}}",
        "type": "string"
      },
      {
        "key": "in",
        "value": "header",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "deployment",
      "value": "am.example.com"
    },
    {
      "key": "baseUrl",
      "value": "https://{{deployment}}/am"
    }
  ]
}