---
title: "Sso"
method: POST
path: "/api/asclepius/auth/sso"
tags: ["asclepius"]
---

# Sso

`POST /api/asclepius/auth/sso`

## Request

- Base URL: `https://app.archangelhealth.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.archangelhealth.ai/api/asclepius/auth/sso`
- Auth: none declared

Exchange a valid doctor-portal session for an Asclepius session (SSO).

A clinician already signed into the doctor portal enters the evaluator portal
automatically — no second login. The presented ``tenant_staff`` token is the
access barrier: it must be valid/unrevoked (only an authenticated, affiliated
clinician holds one). On first arrival we auto-provision an evaluator account
keyed to the doctor's email so access "just works"; on later visits we resume
that same account. The portal is never left unauthenticated — an anonymous
visitor with no doctor session still gets the login form (PRD §3, §7.1).

## Request body

- SsoRequest: A doctor-portal ``tenant_staff`` JWT, exchanged for an Asclepius session.
  - `token` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform.md) - [All operations](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/llms.txt) - [OpenAPI document](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/revisions/3514f4e119da?raw)