gateway.openapi_Gateway

Create Identity Provider

post/v1/accounts/{account_id}/identityProviders

Request

  • Base URL: https://api.fireworks.ai
  • URL: https://api.fireworks.ai/v1/accounts/{account_id}/identityProviders
  • Auth: HTTP bearer

Path parameters

account_idstring required

The Account Id

Request body

namestring
displayNamestring
createTimestring date-time
updateTimestring date-time
tenantDomainsstring[]
state'STATE_UNSPECIFIED' | 'CREATING' | 'READY' | 'UPDATING' | 'DELETING'
domainUrlstring

The domain URL.

issuerUrlstring

The OIDC issuer URL.

clientIdstring

The OIDC client ID.

enableJitUserProvisioningboolean

Enable Just-In-Time (JIT) user provisioning. When enabled, users are automatically created in the account on first SSO login if they don't already exist. When disabled, users must be pre-provisioned before they can authenticate via SSO.

jitDefaultRolestring

Default role assigned to JIT-provisioned users. Valid values: "admin", "user", "contributor", "inference-user". Only applies when enable_jit_user_provisioning is true and RBAC V2 is enabled. If empty or unset, defaults to "inference-user" (least privilege). If RBAC V2 is not enabled for the account, JIT users always get "user" role.

enforceSsoboolean
enableIdpInitiatedSsoboolean

Enable IdP-initiated SAML (Security Assertion Markup Language) single sign-on. When enabled, users can start the login flow from their identity provider's portal (e.g., Okta app launcher) instead of from the Fireworks login page. Only supported for SAML identity providers.

Response

A successful response.

namestring
displayNamestring
createTimestring date-time
updateTimestring date-time
tenantDomainsstring[]
state'STATE_UNSPECIFIED' | 'CREATING' | 'READY' | 'UPDATING' | 'DELETING'
domainUrlstring

The domain URL.

issuerUrlstring

The OIDC issuer URL.

clientIdstring

The OIDC client ID.

enableJitUserProvisioningboolean

Enable Just-In-Time (JIT) user provisioning. When enabled, users are automatically created in the account on first SSO login if they don't already exist. When disabled, users must be pre-provisioned before they can authenticate via SSO.

jitDefaultRolestring

Default role assigned to JIT-provisioned users. Valid values: "admin", "user", "contributor", "inference-user". Only applies when enable_jit_user_provisioning is true and RBAC V2 is enabled. If empty or unset, defaults to "inference-user" (least privilege). If RBAC V2 is not enabled for the account, JIT users always get "user" role.

enforceSsoboolean
enableIdpInitiatedSsoboolean

Enable IdP-initiated SAML (Security Assertion Markup Language) single sign-on. When enabled, users can start the login flow from their identity provider's portal (e.g., Okta app launcher) instead of from the Fireworks login page. Only supported for SAML identity providers.

Changes

No recorded changes to this operation across all 1 revision of this API.