SAML applications auth flow

Handle SAML authentication request (Redirect binding)

Process SAML authentication request using HTTP Redirect binding. The application policy or ForceAuthn can require fresh authentication; otherwise an existing session may be reused. The response assertion preserves the actual authentication time. When authnRequestConfig.requireSignedAuthnRequests is true, the request must be signed using the configured service provider signing certificate.

get/api/saml/{id}/authn

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/saml/{id}/authn
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Path parameters

idstring required

The ID of the SAML application.

Query parameters

SAMLRequeststring required

The SAML request message.

Signaturestring

The signature of the request.

SigAlgstring

The signature algorithm.

RelayStatestring nullable

The relay state parameter.

Response

OK

Changes

No recorded changes to this operation across all 8 revisions of this API.