> ## Documentation Index
> Fetch the complete documentation index at: https://docs-dev-docs-5625.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Resource Owner Password Grant

> Deprecated endpoint that authenticates a user with credentials and returns an Access Token and ID Token.

## Endpoint

`POST /oauth/ro`

Given the user's credentials, this endpoint will authenticate the user with the provider and return a JSON object with the Access Token and an ID Token.

<Note>
  This endpoint is part of the legacy authentication pipeline and has been replaced in favor of the [Password Grant](#resource-owner-password). For more information on the latest authentication pipeline refer to [Introducing OIDC Conformant Authentication](/api-auth/intro).
</Note>

### Remarks

* This endpoint only works for database connections, passwordless connections, Active Directory/LDAP, Windows Azure AD, and ADFS.
* The `profile` scope requests access to the End-User's default profile Claims, which include `name`, `family_name`, `given_name`, and others.
* The `email` scope requests access to the `email` and `email_verified` Claims.

### Learn More

* [Calling APIs from Highly Trusted Applications](https://auth0.com/docs/get-started/authentication-and-authorization-flow/resource-owner-password-flow)

## Body Parameters

<ParamField body="client_id" type="string" required />

<ParamField body="connection" type="string" required />

<ParamField body="grant_type" type="string" required>
  Allowed values: `password`
</ParamField>

<ParamField body="username" type="string" required />

<ParamField body="password" type="string" required />

<ParamField body="scope" type="string" />

<ParamField body="id_token" type="string" />

<ParamField body="device" type="string" />

## Response Messages

| Status | Description |
| - | - |
| 200 | Successful authentication |
| 400 | Bad Request |
| 401 | Unauthorized |
| 429 | Too Many Requests |
| 403 | Forbidden |
| default | Unexpected error |