---
title: Token endpoint authentication methods
description: The token endpoint authentication method determines how PingOne authenticates applications at various endpoints, such as the token, token introspection, token revocation, and pushed authorization request endpoints. Learn more about token endpoint authentication methods in Client Authentication in the OpenID Connect (OIDC) specification.
component: pingone
page_id: pingone:applications:p1_token_endpoint_authentication_methods
canonical_url: https://docs.pingidentity.com/pingone/applications/p1_token_endpoint_authentication_methods.html
revdate: February 07, 2025
section_ids:
  related-links: Related links
---

# Token endpoint authentication methods

The token endpoint authentication method determines how PingOne authenticates applications at various endpoints, such as the token, token introspection, token revocation, and pushed authorization request endpoints. Learn more about token endpoint authentication methods in [Client Authentication](https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication) in the OpenID Connect (OIDC) specification.

PingOne supports the following token endpoint authentication methods:

* CLIENT\_SECRET\_POST

  Include the client credentials in the HTTP request body.

* CLIENT\_SECRET\_BASIC

  Include the client credentials using the HTTP Basic authentication scheme.

* CLIENT\_SECRET\_JWT

  Create a digitally signed JSON Web Token (JWT) using HS256, HS384, or HS512.

  You can use expressions to retrieve information from the authentication JWT for token fulfillment. Learn more about using the expression builder in [PingOne Expression Language](../pingone_expression_language/p1_expression_language.html) and [Variables](../pingone_expression_language/p1_expressionlang_variables.html).

* PRIVATE\_KEY\_JWT

  Create a digitally signed JWT using RS256, RS384, or RS512 with a private key owned by the application or resource server.

  You can use expressions to retrieve information from the authentication JWT for token fulfillment. Learn more about using the expression builder in [PingOne Expression Language](../pingone_expression_language/p1_expression_language.html) and [Variables](../pingone_expression_language/p1_expressionlang_variables.html).

## Related links

* [Grant types](p1_grant_types.html)