Team

Configure single sign-on

Saves the identity provider. A SAML metadata URL is read for the sign-in address, entity ID and signing certificate. Switching it on needs a complete configuration and at least one verified domain, and only people with an address on a verified domain can ever sign in through it. Switching it on signs out everybody on a restricted domain but the caller, and signedOut says how many.

put/api/v1/sso

Request

  • Base URL: http://localhost:5180
  • URL: http://localhost:5180/api/v1/sso
  • Auth: API key in cookie better-auth.session_token

Request body

protocol'saml' | 'oidc'
enabledboolean

Response

Single sign-on for this team as it stands.

okunknown required

Changes

No recorded changes to this operation across all 1 revision of this API.