SSO via HTTP-Redirect binding

Receives a SAML2 AuthnRequest via HTTP-Redirect binding (deflate + base64 encoded in query params). Validates the request, authenticates the user and returns an HTML form that auto-submits the signed SAMLResponse to the SP’s Assertion Consumer Service URL.

Authentication

Api-Keystring

API key of the organization. Always sent together with the Secret-Access header.

Path parameters

centralized_organization_slugstringRequired

Headers

Secret-AccessstringRequired

Query parameters

SAMLRequeststringRequired

Deflate + base64 encoded AuthnRequest

RelayStatestringOptional
Opaque relay state from the SP

Response

HTML auto-submit form with SAMLResponse

Errors

400
Bad Request Error
422
Unprocessable Entity Error