Authentication

Sso

Initiate SAML Single Sign-On flow.

Redirects the user to the Identity Provider’s SSO URL with a SAML AuthnRequest.

Args: request: FastAPI request object. account: Account identifier (slug or ID). provider: Optional provider name to use (e.g., ‘okta’, ‘azure_ad’). If not specified, uses the configured provider for the account. relay_state: Optional state to return after successful authentication. session: Database session.

Returns: RedirectResponse to the IdP.

GET

api

auth

saml

sso

Sso

curl --request GET \
  --url https://api.example.com/api/v1/auth/saml/sso

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Query Parameters

account

string

required

Account slug or ID

provider

string | null

Specific provider name to force use of

relay_state

string | null

Client state to preserve

Response

Redirects to Identity Provider

AcsSAML Assertion Consumer Service (ACS) endpoint. Identity Provider POSTs the SAML assertion here after successful authentication.

⌘I

Sso

curl --request GET \
  --url https://api.example.com/api/v1/auth/saml/sso

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Overview

Health

Authentication

Collections

Records

Users

Accounts

Invitations

Groups

Permissions

Roles

Macros

Audit Logs

Files

Dashboard

Migrations

Admin

Sso

Query Parameters

Response