Auth
Start a SAML Login
Begin an SP-initiated SAML login by redirecting the browser to the tenant’s identity provider.
GET
SP-initiated SAML login (redirect to the IdP)
Begins an SP-initiated SAML login. When the tenant’s SSO connection is enabled,
the server builds a SAML
AuthnRequest and 302-redirects the browser to the
identity provider’s SSO URL. After the user authenticates, the IdP posts the
assertion to
POST /auth/saml/{tenantID}/acs, which opens
the dashboard session.
Navigate a browser to this URL rather than calling it from a server. The SP
details the IdP needs are published at
GET /auth/saml/{tenantID}/metadata.
Path Parameters
Example Request
Example Response
There is no response body. A successful call answers302 Found with the IdP
redirect in Location:
SAMLRequest is the deflated, base64- and URL-encoded AuthnRequest
(HTTP-Redirect binding). No RelayState is sent: Recurso starts the request
with an empty relay state, and the redirect carries only SAMLRequest.
Errors
Errors use the standard envelope — see Errors.