API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Sso

AdminUpdated Sep 11, 2026

Sso

Public — no authentication required.

3 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path

Idem

Explanation

GET /v1/sso/callback

Enterprise SSO IdP redirect target. Verifies the OIDC id_token, JIT-provisions org membership, and redirects back with a one-time ticket.

POST /v1/sso/saml/acs

SAML Assertion Consumer Service. Verifies the signed assertion (audience, timestamps, XSW-hardened), JIT-provisions org membership, and redirects back with a one-time ticket.

GET /v1/sso/saml/:connectionId/metadata

SAML SP metadata XML for a connection: the entityID and ACS URL the operator registers with their IdP.

Was this page helpful?