External account ID access tokens

To use Pismo endpoints to retrieve information from an account that uses an external account ID (account ID from an external system and adopted by Pismo), the authentication token that you generate must include the claim external_account_id.

🚧

Use with selected endpoints only

For a list of all endpoints that require this type of token, see Endpoints that require an external account ID-specific token.

{  
  "aud": "<https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit">,  
  "customClaims": {  
    "custom1": "someValue",  
    "userexample": "[[email protected]](mailto:[email protected])"  
  },  
  "external_account_id": "123123",  
  "exp": 1679587788,  
  "iat": 1679584188,  
  "iss": "[[email protected]](mailto:[email protected])",  
  "pismo": {  
    "group": "pismo-v1:admin:rw"  
  },  
  "sub": "[[email protected]](mailto:[email protected])",  
  "tenant_id": "TN-1231231-2",  
  "uid": "133276544"  
}