---
title: "SAML Assertion Consumer Service"
method: POST
path: "/auth/saml/acs"
tags: ["sso"]
---

# SAML Assertion Consumer Service

`POST /auth/saml/acs`

Receives a SAML Response from the IdP, validates the assertion, provisions the user if needed, and returns JWT tokens.

## Response `200`

Authentication successful

- object
  - `accessToken` string, required
  - `refreshToken` string, required
  - `expiresAt` string, date-time, required
  - `userId` string, uuid, required

## Other responses

- `400` — Invalid SAML response
- `429` — Too many failed authentication attempts

## Changes

- **2026-04-27** `d598a26c7fd9` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/quantum-chain-pte-ltd/apis/qustody-api/changes/auth/saml/acs/post.md)

---

[API](https://skmtc.dev/quantum-chain-pte-ltd/apis/qustody-api.md) · [All operations](https://skmtc.dev/quantum-chain-pte-ltd/apis/qustody-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/quantum-chain-pte-ltd/qustody-api/revisions/ecb2cea3c096/schema)