---
title: "Test the saved provider"
method: POST
path: "/api/v1/sso/test"
tags: ["Team"]
---

# Test the saved provider

`POST /api/v1/sso/test`

## Request

- Base URL: `http://localhost:5180`
- URL: `http://localhost:5180/api/v1/sso/test`
- Auth: API key in cookie `better-auth.session_token`

Checks the saved configuration without signing anyone in: for SAML, that the sign-in address answers and the certificate is one; for OIDC, that the issuer publishes a discovery document naming itself and a client ID and secret are stored. A real sign-in is the only full proof.

## Response `200`

The verdict. A failure is an answer, not an error.

- object
  - `ok` unknown, required
  - `data` object, required
    - `ok` boolean, required: Whether everything a sign-in needs from the provider is in place and answering.
    - `reason` 'not_configured' | 'request_invalid' | 'response_invalid' | 'signature_invalid' | 'expired' | 'idp_refused' | 'no_email' | 'domain_not_allowed' | 'unreachable', nullable, required: What is missing or failing, when something is.
    - `detail` string, required: What was found, in a sentence.
  - `meta` object, required
    - `requestId` string, required: Echoed in the x-request-id header. Quote it in a bug report.

## Other responses

- `403`: Not an owner of this team.

---

[API](https://skmtc.dev/dardaris/apis/dardaris-api.md) · [All operations](https://skmtc.dev/dardaris/apis/dardaris-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dardaris/apis/dardaris-api/revisions/4aff33835c73?raw)