---
title: "Create access key from SAML"
method: POST
path: "/v1/cwobject/temporary-credentials/saml"
tags: ["CWObject"]
---

# Create access key from SAML

`POST /v1/cwobject/temporary-credentials/saml`

Exchanges a base64-encoded SAML assertion from a configured Workload Identity Federation provider for a time-limited CoreWeave AI Object Storage access key. No CoreWeave bearer token is required.

## Request body

- CreateAccessKeyFromSAMLRequest — Inputs for exchanging a SAML assertion for a CoreWeave AI Object Storage access key.
  - `durationSeconds` integer, required — Lifespan of the resulting access key in seconds. Must be `0-43200` (12 hours maximum).
  - `orgId` string, required — The CoreWeave organization ID to mint the access key for.
  - `samlResponse` string, required — The SAML assertion, base64-encoded.
  - `attributes` object — Free-form caller-supplied attributes attached to the key (for example, `name`).
  - `configId` string — The Workload Identity Federation configuration ID that corresponds to the SAML provider. Configurations are created from the Cloud Console; see [Using Workload Identity Federation with SAML](/products/storage/object-storage/auth-access/workload-identity-federation/saml-workload-federation).

## Response `200`

OK

- CreateAccessKeyFromSAMLResponse — The newly-minted access key. The `secretKey` is the only opportunity to read the secret value.
  - `accessKeyId` string — The access-key ID.
  - `secretKey` string — The secret access key. Treat as a credential and store it securely on receipt.
  - `principalName` string — The fully-qualified principal name that owns the access key (for example, `saml/examplerole`).
  - `expiry` string, date-time — The expiration time of the access key.
  - `attributes` object — The attributes that were attached to the key on creation.

## Other responses

- `default` — Default error response

---

[API](https://skmtc.dev/coreweave/apis/coreweave-telemetry-relay-api.md) · [All operations](https://skmtc.dev/coreweave/apis/coreweave-telemetry-relay-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/coreweave/coreweave-telemetry-relay-api/revisions/3b98ea4fe0c3/schema)