---
title: "A firm's single sign-on for an address, unauthenticated"
method: POST
path: "/v1/auth/sso"
tags: ["auth"]
---

# A firm's single sign-on for an address, unauthenticated

`POST /v1/auth/sso`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/auth/sso`
- Auth: none declared

Our own sign-in page asks this for the address a person typed, and sends them straight to their firm's identity provider with the connection it names, so WorkOS's hosted page never shows. Null where the domain has no active connection. Only the domain is looked up; rate limited per caller.

## Request body

- object
  - `email` string, email, required

## Response `200`

The connection, or null.

- object
  - `connection_id` string, nullable, required

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `429`: Too many requests; `Retry-After` says how long to wait.
- `502`: An upstream this service depends on failed or answered nonsense.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)