---
search:
  tags:
    - customer
    - POST
seo:
  description: >-
    Server-to-server: requires an enterprise service API key… Reference for the
    POST /api/customer-auth/enterprise-exchange endpoint in the FreeTicket B2B
    API.
sidebar:
  label: Exchange the headless SSO one-time token for a session token
  badge: POST
title: Exchange the headless SSO one-time token for a session token
type: openapi-operation
---
Server-to-server: requires an enterprise service API key (Bearer or x-api-key). Exchanges the one-time token issued by /api/customer-auth/enterprise-return (single-use, 60 s TTL) for the buyer's session token. Plain body, no { data } envelope.

`POST /api/customer-auth/enterprise-exchange`