How to Enroll Identity via REST API for 3rd Party CA (OTT) Without Using `ziti` CLI or SDK?

1

Hi everyone,

We're building a Bash-based automation script to enroll identities using a 3rd-party CA (One-Time Token method), as described in the docs here:
:link: https://openziti.io/docs/learn/core-concepts/identities/enrolling/#3rd-party-ca---one-time-token

However, the documentation mainly references the ziti CLI for this process. Since our setup involves ephemeral spot EC2 instances that autoscale, we cannot install the Ziti CLI or use any SDKs. We need to complete the entire process using pure shell and curl, without relying on any external tools.

We’ve looked through the Edge Client API docs, but we’re still unsure about:

  • The exact API endpoint to hit for the OTT enrollment flow (when using a 3rd party CA)
  • The structure of the JSON payload expected by that API

Could someone share the correct REST API usage and sample payload for this specific flow?

Any help is appreciated!

Thanks