sso

SAML Assertion Consumer Service

Changed on

Receives a SAML Response from the IdP, validates the assertion, provisions the user if needed, and returns JWT tokens.

post/auth/saml/acs

Request

Request body application/x-www-form-urlencoded

SAMLResponsestring required

Base64-encoded SAML Response from IdP

RelayStatestring

Optional relay state (tenant ID override)

Response

Authentication successful

accessTokenstring required
refreshTokenstring required
expiresAtstring date-time required
userIdstring uuid required

Changes