Creating a Session

The client application initiates a session by issuing a POST to the /api/v1.0/sessions endpoint. The request body must contain the following:

The instance that the session should run in.
For authorization, a JWT which must contain an instance ID which matches the instance ID included in the headers.

The API returns a UUID identifying the session, which is generated by Elastic Access, and which subsequent session activity must use. (It is not possible for the producer’s software to specify a session ID. It can only be generated by Elastic Access.)

When a session is first created, it is in an IDLE state.