CWObject

Create access key from SAML

Exchanges a base64-encoded SAML assertion from a configured Workload Identity Federation provider for a time-limited CoreWeave AI Object Storage access key. No CoreWeave bearer token is required.

post/v1/cwobject/temporary-credentials/saml

Request body

durationSecondsinteger required

Lifespan of the resulting access key in seconds. Must be 0-43200 (12 hours maximum).

orgIdstring required

The CoreWeave organization ID to mint the access key for.

samlResponsestring required

The SAML assertion, base64-encoded.

attributesobject

Free-form caller-supplied attributes attached to the key (for example, name).

configIdstring

The Workload Identity Federation configuration ID that corresponds to the SAML provider. Configurations are created from the Cloud Console; see Using Workload Identity Federation with SAML.

Response

accessKeyIdstring

The access-key ID.

secretKeystring

The secret access key. Treat as a credential and store it securely on receipt.

principalNamestring

The fully-qualified principal name that owns the access key (for example, saml/examplerole).

expirystring date-time

The expiration time of the access key.

attributesobject

The attributes that were attached to the key on creation.

Changes

No recorded changes to this endpoint across all 1 revision of this API.