4.1 Obtain a Nonce

The following example shows a request from the broker client to the AD FS server for a nonce (section 3.2.5.1.1.1) and the response from the AD FS server that contains the nonce (section 3.2.5.1.1.2).

Request:

 POST https://server.example.com/adfs/oauth2/token/
 HTTP/1.1
 {
  Content-Type=application/x-www-form-urlencoded,
  Host=server.example.com,
  Content-Length=24,
  Expect=[100-continue]
 }
 grant_type=srv_challenge

Response:

 HTTP/1.1 200 OK
 {
  Content-Length=1200,
  Content-Type=application/json;charset=UTF-8
 }
 {"Nonce":"eyJWZXJza..."}