Admin Push
A specialized endpoint used by the S-Launch admin portal to push enrollment tokens to an S-Launch instance. The instance calls back to the admin portal for mutual verification and credential exchange — a paired "the admin portal trusts me, and I trust the admin portal" handshake.
This is not a general-purpose endpoint; you would only call it from a paired admin portal implementation.
Scopes
| Scope | Reach |
|---|---|
| (none) | The endpoint is unauthenticated by scope — trust is established via the mutual-verification callback. |
Endpoints
Receive Enrollment
POST /api/admin-push/enrollment
Receives an enrollment token from the admin portal. The instance verifies the token by calling back to the admin portal, completing a mutual-trust handshake and exchanging credentials.
Required scope: none
Request body — EnrollmentPushRequest
Response 200 — confirmation payload (the credentials are exchanged via the callback, not in this response).
TIP
This endpoint expects to be the receiving side of a handshake initiated by the admin portal. Calling it without a matching admin-portal callback path will fail verification.
See also
- Bootstrap Activation — the alternative path for setting up an instance without an admin portal.
- Configuration — instance-side configuration for the admin-portal endpoint and credentials.