Authentication

SAML ACS callback (foundation mode — disabled by default)

⚠️ Builds a session directly from the caller-supplied payload — no SAML assertion signature validation against settings.saml.cert. This is a full authentication bypass if reachable with a real SAML IdP configured, so it is disabled unless AUTH_FOUNDATION_MODE=true is explicitly set (local development/demos only). Returns 501 otherwise.

post/api/auth/saml/acs

Request

  • Base URL: https://api.cernion.de
  • URL: https://api.cernion.de/api/auth/saml/acs
  • Auth: none declared

Query parameters

tokenstring

Optional Cernion MCP token as URL query parameter. If provided, it overrides CERNION_TOKEN for this request. Prefer Authorization Bearer header in production to reduce token exposure in URLs/logs.

Request body

payloadobject
tokenstring

Optional Cernion MCP token for this request. Overrides CERNION_TOKEN when provided.

Example request

{
  "payload": {
    "nameID": "user@example.com"
  }
}

Response

Successful response

object required

Changes

No recorded changes to this operation across all 2 revisions of this API.