---
title: "GET /v1/auth/oidc/{org_slug} — initiate OIDC SSO for an organization."
method: GET
path: "/v1/auth/oidc/{org_slug}"
tags: ["oidc"]
---

# GET /v1/auth/oidc/{org_slug} — initiate OIDC SSO for an organization.

`GET /v1/auth/oidc/{org_slug}`

Loads the org's OIDC config, performs discovery, generates an authorization
URL with PKCE + nonce, stores state in DB, and returns the redirect URL.

## Path parameters

- `org_slug` string, required

## Response `200`

Authorization URL

- OidcInitiateResponse — Response for GET /v1/auth/oidc/{org_slug} (initiate OIDC flow).
  - `authorize_url` string, required

## Other responses

- `400` — OIDC disabled
- `404` — Organization or OIDC config not found

---

[API](https://skmtc.dev/microsandbox/apis/microsandbox-api.md) · [All operations](https://skmtc.dev/microsandbox/apis/microsandbox-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/microsandbox/microsandbox-api/revisions/23f2a45cb09b/schema)