---
title: "Create SSA."
method: POST
path: "/ssa"
tags: ["SSA"]
---

# Create SSA.

`POST /ssa`

# Create SSA for the organization with `expiration` (optional).
----

**Security: Bearer Auth**

Provide your bearer token in the Authorization header when making requests to protected resources.

Example: `Authorization: Bearer {{your-access-token}}`

**Security: OAuth 2.0**

Scopes:
- `https://jans.io/auth/ssa.admin` - **SSA Admin**, You can create `SSA`.

## Request body

- object
  - `org_id` string, required — The `org_id` is used for organization identification.
  - `description` string — Description SSA.
  - `expiration` number — Expiration date. If this field is not sent, it will take days to expire, according to how it has been configured.
  - `software_id` string, required — The `software_id` is used for software identification.
  - `software_roles` string[], required — List of string values, fixed value ["password", "notify"].
  - `grant_types` string[], required — Fixed value ["client_credentials"].
  - `one_time_use` boolean, required — Defined whether the SSA will be used only once or can be used multiple times.
  - `rotate_ssa` boolean, required — TODO - Will be used to rotate expiration of the SSA, currently is only saved as part of the SSA.
  - `lifetime` integer — SSA lifetime in seconds.

## Response `201`

Created

- object
  - `ssa` string

## Other responses

- `401` — Unauthorized access request.
- `404` — Invalid SSA Metadata.
- `500` — Internal error occured. Please check log file for details.

## Changes

- **2023-10-10** `4fa86f839845` — 2 info
  - added the new optional request property `lifetime`
  - added the non-success response with the status `404`
- **2023-02-02** `b9705f965648` — 4 breaking, 2 info
  - the request property `grant_types` became required
  - the request property `software_id` became required
  - the request property `software_roles` became required
  - the `org_id` request property type/format changed from `number`/`` to `string`/``
  - …2 more
- **2022-11-28** `491cc51f5ccb` — 1 info
  - api operation id `post-register` removed and replaced with `post-register-ssa`
- **2022-11-10** `6bf06110150f` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/changes/ssa/post.md)

---

[API](https://skmtc.dev/janssenproject/apis/janssen-authorization-server.md) · [All operations](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/janssenproject/janssen-authorization-server/revisions/ae174ecfdc21/schema)