---
title: "SAML ACS callback (foundation mode — disabled by default)"
method: POST
path: "/api/auth/saml/acs"
tags: ["Authentication"]
---

# SAML ACS callback (foundation mode — disabled by default)

`POST /api/auth/saml/acs`

## Request

- Base URL: `https://api.cernion.de`
- URL: `https://api.cernion.de/api/auth/saml/acs`
- Auth: none declared

⚠️ Builds a session directly from the caller-supplied `payload` — no SAML assertion signature validation against `settings.saml.cert`. This is a full authentication bypass if reachable with a real SAML IdP configured, so it is disabled unless `AUTH_FOUNDATION_MODE=true` is explicitly set (local development/demos only). Returns 501 otherwise.

## Query parameters

- `token` string

## Request body

- object
  - `payload` object
  - `token` string: Optional Cernion MCP token for this request. Overrides CERNION_TOKEN when provided.

## Response `200`

Successful response

- object

---

[API](https://skmtc.dev/cernion/apis/cernion-energy-tools-api.md) · [All operations](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/revisions/cdb94473b538?raw)