Overview

The SSO API enables SAML and OIDC single sign-on configuration for the Truss platform. Providers can be configured, retrieved, or removed. All SSO endpoints support auto-provisioning: if the authenticating email does not exist in the system, a new organization and user are created automatically.

Endpoints

MethodPathDescription
POST/sso/configureConfigure a SAML or OIDC provider
GET/sso/configGet current SSO configuration
DELETE/sso/configRemove SSO configuration
POST/auth/saml/callbackSAML assertion consumer URL
POST/auth/oidc/callbackOIDC callback URL

Example

curl -X POST http://localhost:4000/sso/configure \
  -H "Content-Type: application/json" \
  -d '{"provider":"saml","metadata_url":"https://idp.example.com/metadata"}'
PreviousOrganizationsNextTemplates