Create SP configuration | Crehana Developers

curl -X POST https://qa.creha.co/api/v5/rest/auth/saml2/sp/centralized_organization_slug/ \
     -H "Secret-Access: Secret-Access" \
     -H "Api-Key: <apiKey>" \
     -H "Content-Type: application/json" \
     -d '{
  "entity_id": "https://crehana.com/saml2/sp/org/123",
  "acs_url": "https://crehana.com/api/v5/rest/auth/saml2/sp/123/acs/",
  "slo_url": "https://crehana.com/api/v5/rest/auth/saml2/sp/123/slo/",
  "sign_requests": false,
  "name_id_format": "email",
  "validity_days": 365
}'

{
  "message": "SP configuration retrieved successfully",
  "datetime": "2026-03-05T12:00:00",
  "data": {
    "id": "1",
    "centralized_organization_id": "123",
    "entity_id": "https://crehana.com/saml2/sp/org/123",
    "acs_url": "https://crehana.com/api/v5/rest/auth/saml2/sp/123/acs/",
    "sign_requests": false,
    "name_id_format": "email",
    "is_active": true,
    "created_at": "2026-03-05T12:00:00Z",
    "updated_at": "2026-03-05T12:00:00Z"
  }
}

Creates the SAML2 SP configuration for an organization. If sign_requests is true, an RSA key pair and X.509 certificate are auto-generated to sign AuthnRequests. Only one SP configuration per organization is allowed.

Authentication

Api-Keystring

API key of the organization. Always sent together with the Secret-Access header.

Path parameters

centralized_organization_slugstringRequired

Request

This endpoint expects an object.

entity_idstringRequired

Entity ID URI for the SP

acs_urlstringRequired

Assertion Consumer Service URL

slo_urlstringOptional

Single Logout URL

sign_requestsbooleanOptionalDefaults to false

Whether to sign AuthnRequests

name_id_formatenumOptionalDefaults to email

Name ID format for SAML assertions

validity_daysintegerOptionalDefaults to 365

Certificate validity in days

Response

Successful Response

messagestring

Message of the response

datetimestring

Datetime of the API in ISO Format

dataobjectOptional

Errors

400

Bad Request Error

409

Conflict Error

422

Unprocessable Entity Error

Authentication

Path parameters

Headers

Request

Response

Errors