Skip to main content
POST
Login
Use this endpoint to authenticate a . On a successful request, this endpoint returns a (suki_token/sdp_suki_token) that you must use to authorize all subsequent API calls for that user. The suki_token is a that is valid for one hour. It contains the user, organization, and information needed to access Suki services.
If you are using the JWT Bearer/Assertion authentication method, the response may also include an additional jwt_bearer field.

Code examples

Body

application/json

Partner credentials from onboarding. Bearer partners must also include provider_id.

partner_id
string
required

Unique identifier for the partner. This will be shared securely by Suki to the partner through a separate partner registration process.

Example:

"your-partner-id"

partner_token
string
required

JWT token issued by trusted authorization server. The token must include Provider Email.

Example:

"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

provider_id
string

Optional - Unique identifier for the provider. This is required for Bearer type partners only and will be ignored for other partner types. This must match a pre-defined expression.

Example:

"provider-123"

Response

Request succeeded.

Suki access token returned after successful Login.

suki_token
string

JWT access token for the authenticated provider. Pass this value as sdp_suki_token on subsequent requests. Expires after one hour.

Example:

"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"

Last modified on May 22, 2026