Spaces Embed Service APIs - EmbedLaunch
License: Copyright © 2026 Boomi, LP.
Download OpenAPI Specification: Download
For more information about Postman collections, forking, and making your first API call, refer to the Working with Boomi APIs on Postman page.
Entry point for the embedded Spaces iframe: verifies the Auth0 launch token, creates a server-side session, and redirects into the embedded app.
Launch the embedded Spaces iframe
Verifies the token against the resolved tenant's JWKS, guards against replay attacks using the jti claim, creates a session, sets the session cookie, and issues an HTTP 302 redirect to /app/**.
Error Handling: All error responses return text/html. The HTTP status codes documented below represent the actual status returned (i.e., errors are not served as 200 OK pages).
query Parameters
| token required | string Auth0-signed launch JWT (id_token). |
Responses
Response samples
- 302
- 400
- 401
- 403
- 503
Content type
text/html
No response body. See the Location and Set-Cookie response headers above.
Was this topic helpful?
