DotID — Developer integration

DotID for developers — how to register OIDC clients, exchange CI OIDC tokens for short-lived FGAI access tokens (workload identity federation), validate JWTs in your service, address resources via FRN, and call the IAM APIs.

Topics

• OIDC client setup
• Workload identity federation — call FlexGalaxy.AI APIs from CI without long-lived secrets
• CLI authentication for DotID
• CLI & fgshell command reference
• Integrate an external app with AK/SK
• Sandbox test operators — headless login tokens for CI
• API overview for external developers
• API authentication and JWT validation
• First-party API boundaries
• Hierarchical and cross-account access
• Check authorization (PDP)
• IAM roles and STS AssumeRole
• Manage workforce (Identity Center) users headlessly (M2M)
• FlexGalaxy Resource Names (FRN)
• OpenAPI reference
• DotID examples
• DotID external developer API example

Entry-point reminder

• Platform admin login: auth.flexgalaxy.ai/admin-console → lands at admin-console.flexgalaxy.ai/stargate

• Account root login: auth.flexgalaxy.ai/root → lands at console.flexgalaxy.ai/ (DartBoard at host root)

• Workforce login: auth.flexgalaxy.ai/console → lands at console.flexgalaxy.ai/startpoint