gateway.openapi_Gateway

Create Identity Provider

Changed on Oct 16, 2026

post/v1/accounts/{account_id}/identityProviders

Request

Base URL
https://api.fireworks.ai
Auth
HTTP bearer
TypeScript
https://skmtc.dev/fw-ai-external/apis/gateway-rest-api/docs/v1/accounts/:account_id/identityProviders/post.ts
A function with typed inputs. Its response is checked against the schema.

Path parameters

account_idstring required

The Account Id

Request body

namestring

displayNamestring

createTimestring date-time

updateTimestring date-time

tenantDomainsstring[]

state'STATE_UNSPECIFIED' | 'CREATING' | 'READY' | 'UPDATING' | 'DELETING'

domainUrlstring

The domain URL.

issuerUrlstring

The OIDC issuer URL.

clientIdstring

The OIDC client ID.

enableJitUserProvisioningboolean

Enable Just-In-Time (JIT) user provisioning. When enabled, users are automatically created in the account on first SSO login if they don't already exist. When disabled, users must be pre-provisioned before they can authenticate via SSO.

jitDefaultRolestring

Default role assigned to JIT-provisioned users. Valid values: "admin", "user", "contributor", "inference-user". Only applies when enable_jit_user_provisioning is true and RBAC V2 is enabled. If empty or unset, defaults to "inference-user" (least privilege). If RBAC V2 is not enabled for the account, JIT users always get "user" role.

enforceSsoboolean

enableIdpInitiatedSsoboolean

Enable IdP-initiated SAML (Security Assertion Markup Language) single sign-on. When enabled, users can start the login flow from their identity provider's portal (e.g., Okta app launcher) instead of from the Fireworks login page. Only supported for SAML identity providers.

Response

A successful response.