---
title: "POST /providers/ssf/"
method: POST
path: "/providers/ssf/"
tags: ["providers"]
---

# POST /providers/ssf/

`POST /providers/ssf/`

SSFProvider Viewset

## Request body

- SSFProviderRequest — SSFProvider Serializer
  - `name` string, required
  - `signing_key` string, uuid, required — Key used to sign the SSF Events.
  - `oidc_auth_providers` integer[]
  - `event_retention` string
  - `push_verify_certificates` boolean

## Response `201`

- SSFProvider — SSFProvider Serializer
  - `pk` integer, required
  - `name` string, required
  - `component` string, required — Get object component so that we know how to edit the object
  - `verbose_name` string, required — Return object's verbose_name
  - `verbose_name_plural` string, required — Return object's plural verbose_name
  - `meta_model_name` string, required — Return internal model name
  - `signing_key` string, uuid, required — Key used to sign the SSF Events.
  - `token_obj` Token, required — Token Serializer
    - `pk` string, uuid, required
    - `managed` string, nullable — Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update.
    - `identifier` string, required
    - `intent` 'verification' | 'api' | 'recovery' | 'app_password'
    - `user` integer
    - `user_obj` User, required — User Serializer
      - `pk` integer, required
      - `username` string, required
      - `name` string, required — User's display name.
      - `is_active` boolean — Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
      - `last_login` string, date-time, nullable
      - `date_joined` string, date-time, required
      - `is_superuser` boolean, required
      - `groups` string[]
      - `groups_obj` PartialGroup[], nullable, required
        - `pk` string, uuid, required
        - `num_pk` integer, required — Get a numerical, int32 ID for the group
        - `name` string, required
        - `is_superuser` boolean — Users added to this group will be superusers.
        - `attributes` object
      - `roles` string[]
      - `roles_obj` Role[], nullable, required
        - `pk` string, uuid, required
        - `name` string, required
      - `email` string, email
      - `avatar` string, required — User's avatar, either a http/https URL or a data URI
      - `attributes` object
      - `uid` string, required
      - `path` string
      - `type` 'internal' | 'external' | 'service_account' | 'internal_service_account'
      - `uuid` string, uuid, required
      - `password_change_date` string, date-time, required
      - `last_updated` string, date-time, required
    - `description` string
    - `expires` string, date-time, nullable
    - `expiring` boolean
  - `oidc_auth_providers` integer[]
  - `oidc_auth_providers_obj` Provider[], required
    - `pk` integer, required
    - `name` string, required
    - `authentication_flow` string, uuid, nullable — Flow used for authentication when the associated application is accessed by an un-authenticated user.
    - `authorization_flow` string, uuid, nullable — Flow used when authorizing this provider.
    - `invalidation_flow` string, uuid, nullable — Flow used ending the session from a provider.
    - `property_mappings` string[]
    - `component` string, required — Get object component so that we know how to edit the object
    - `assigned_application_slug` string, nullable, required — Internal application name, used in URLs.
    - `assigned_application_name` string, nullable, required — Application's display Name.
    - `assigned_backchannel_application_slug` string, nullable, required — Internal application name, used in URLs.
    - `assigned_backchannel_application_name` string, nullable, required — Application's display Name.
    - `verbose_name` string, required — Return object's verbose_name
    - `verbose_name_plural` string, required — Return object's plural verbose_name
    - `meta_model_name` string, required — Return internal model name
  - `ssf_url` string, nullable, required
  - `event_retention` string
  - `push_verify_certificates` boolean

## Other responses

- `400`
- `403`

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) · [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goauthentik/authentik/revisions/4e42e86021d7/schema)