ALalianza
SSO Authentication

Complete SSO Authentication (IdP Callback)

Completes the SSO authentication flow after the user has authenticated with their Identity Provider.

Flow:

  1. User authenticates at the IdP
  2. IdP sends SAML assertion to Auth0
  3. Auth0 exchanges it for an authorization code
  4. This endpoint receives the code and exchanges it for user tokens
  5. Returns a LoginTokenX object for authenticated API use
post/v2/authn/sso/login-callback

Request

Query parameters

codestring required

Authorization code from Auth0 after successful IdP authentication

redirect_uristring uri required

Must exactly match the URI used in the initial authentication request

state'ACCOUNT_LEVEL_SSO' | 'PARTITION_ENFORCED_SSO' | 'PARTITION_SSO' required

State token for session tracking and CSRF protection. Contains the SSO configuration scope level.

Response

Authentication successful

authTokenstring
userIdstring
userType'AccountUser' | 'EndUser' | 'ManagementUser' | 'AlianzaUser' | 'BusinessLines'
endUserType'ADMIN' | 'ADVANCED_ADMIN' | 'BASIC_ADMIN' | 'STANDARD' | 'STANDARD_ADMIN' | 'SUPER_ADMIN'
usernamestring
firstNamestring
lastNamestring
emailAddressstring
partitionIdstring
partitionNamestring
accountIdstring
permissionsobject
featureTogglesobject
mustChangePasswordboolean
subPartitionIdsstring[]
tokenSourcestring
grantedAuthoritiesstring[]
pwdHashstring
mustAddEmailboolean
maxLifeInHoursinteger
groupIdstring
groupNamestring

Changes

No recorded changes to this operation across all 1 revision of this API.