Auth

Begin a server-orchestrated external SSO login (Zitadel idpIntent)

MNE-1449 re-flip. Server-drives the external-IdP (Microsoft Entra) login via Zitadel's idpIntent CORE API so the Zitadel hosted-login UI never renders. Starts a POST /v2/idp_intents, sets a short-lived mnemom_idp_initiator cookie (HMAC-signed state carrying the allowlisted redirect_after — the CSRF binding), and 302-redirects the browser to the external IdP authorize URL. DARK: returns 503 unless the cell is configured with AUTH_PROVIDER=zitadel + ZITADEL_DEFAULT_IDP_ID.

get/auth/idp/start

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/idp/start
  • Auth: none required

Query parameters

redirect_afterstring

SPA path to land on after login completes (allowlisted).

Changes

No recorded changes to this operation across all 1 revision of this API.