SAML applications auth flow

Handle SAML authentication request (POST binding)

Process SAML authentication request using HTTP POST binding. The application policy or ForceAuthn can require fresh authentication; otherwise an existing session may be reused. The response assertion preserves the actual authentication time. When authnRequestConfig.requireSignedAuthnRequests is true, the request must be signed using the configured service provider signing certificate.

post/api/saml/{id}/authn

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/saml/{id}/authn
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Path parameters

idstring required

The ID of the SAML application.

Request body

SAMLRequeststring required
RelayStatestring nullable

Response

OK

Changes

No recorded changes to this operation across all 8 revisions of this API.