When logging on the scope needs to be set to RstsProviderScope-DomainName
The RstsProviderScope and DomainName can be retrieved from https://ip_address/service/core/v2/IdentityProviders
For example, if using Curl:
# curl -i -X POST -k -H "Content-Type: application/json" -H "Accept: application/json" -d '{ "grant_type": "password", "password": "Password1", "scope": "
rsts:sts:primaryproviderid:ad15-yourdomain.com", "username": "karl" }' https://ip_address/RSTS/oauth2/token
If using safeguard -bash
