Skip to main content
GET
SP-initiated SAML login (redirect to the IdP)
Begins an SP-initiated SAML login. When the tenant’s SSO connection is enabled, the server builds a SAML AuthnRequest and 302-redirects the browser to the identity provider’s SSO URL. After the user authenticates, the IdP posts the assertion to POST /auth/saml/{tenantID}/acs, which opens the dashboard session. Navigate a browser to this URL rather than calling it from a server. The SP details the IdP needs are published at GET /auth/saml/{tenantID}/metadata.

Path Parameters

Example Request

Example Response

There is no response body. A successful call answers 302 Found with the IdP redirect in Location:
SAMLRequest is the deflated, base64- and URL-encoded AuthnRequest (HTTP-Redirect binding). No RelayState is sent: Recurso starts the request with an empty relay state, and the redirect carries only SAMLRequest.

Errors

Errors use the standard envelope — see Errors.

Authorizations

Authorization
string
header
required

Path Parameters

tenantID
string<uuid>
required

Response

Redirect to the IdP.