> For the complete documentation index, see [llms.txt](https://docs.uaepass.ae/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.uaepass.ae/feature-guides/authentication/token-validation-api/integration-steps/2.-verifying-access-token-api.md).

# 2. Obtaining Authenticated User Information from the Access Token

The SP can validate the access token based on the information obtained in previous step. In case the SP needs to know the user who is authenticated with the presented access token then it can also fet

### cURL Request&#x20;

```
curl --location --request GET 'https://stg-id.uaepass.ae/idshub/userinfo' \
--header 'Authorization: Bearer <<Token to get the authenticated user profile>>'
```

## API detail to get user info

<mark style="color:blue;">`GET`</mark> `https://stg-id.uaepass.ae/idshub/userinfo`

#### Headers

| Name                                            | Type   | Description                                                            |
| ----------------------------------------------- | ------ | ---------------------------------------------------------------------- |
| Authorization<mark style="color:red;">\*</mark> | String | Bearer {access token received from client app or required to validate} |

{% tabs %}
{% tab title="200: OK Note: This response may change as per the scope and list of attributes allowed to share with client application" %}

```javascript
{
"sub": "800F475AC0E7A9ED01B2D5D2C25A59B3",
…
…………
………… "acr":
"urn:safelayer:tws:policies:authentication:level:high", "mobile": "9715555555555",
"amr": [ "urn:safelayer:tws:policies:authentication:adaptive:methods:mobileid", "urn:uae:authentication:method:verified"
] }
```

{% endtab %}
{% endtabs %}
