> ## Documentation Index
> Fetch the complete documentation index at: https://docs-dev-actions-triggers-prototype.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Resource Owner Password Grant

> Deprecated endpoint that authenticates a user with credentials and returns an Access Token and ID Token.

## Endpoint

`POST /oauth/ro`

Given the user's credentials, this endpoint will authenticate the user with the provider and return a JSON object with the Access Token and an ID Token.

<Note>
  This endpoint is part of the legacy authentication pipeline and has been replaced in favor of the [Password Grant](#resource-owner-password). For more information on the latest authentication pipeline refer to [Introducing OIDC Conformant Authentication](/api-auth/intro).
</Note>

### Remarks

* This endpoint only works for database connections, passwordless connections, Active Directory/LDAP, Windows Azure AD, and ADFS.
* The `profile` scope requests access to the End-User's default profile Claims, which include `name`, `family_name`, `given_name`, and others.
* The `email` scope requests access to the `email` and `email_verified` Claims.

### Learn More

* [Calling APIs from Highly Trusted Applications](https://auth0.com/docs/get-started/authentication-and-authorization-flow/resource-owner-password-flow)

## Body Parameters

<ParamField body="client_id" type="string" required />

<ParamField body="connection" type="string" required />

<ParamField body="grant_type" type="string" required>
  Allowed values: `password`
</ParamField>

<ParamField body="username" type="string" required />

<ParamField body="password" type="string" required />

<ParamField body="scope" type="string" />

<ParamField body="id_token" type="string" />

<ParamField body="device" type="string" />

## Response Messages

| Status  | Description               |
| ------- | ------------------------- |
| 200     | Successful authentication |
| 400     | Bad Request               |
| 401     | Unauthorized              |
| 429     | Too Many Requests         |
| 403     | Forbidden                 |
| default | Unexpected error          |