Skip to main content
POST
Initiate enterprise OAuth (OIDC SSO) authorization

Body

application/json

Provide exactly one of email or connection_id.

code_challenge
string
required

PKCE code challenge (S256) bound to the eventual login finalize.

Example:

"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"

email
string<email>

The email whose domain resolves the enterprise connection.

Example:

"jane@acme.com"

connection_id
string

Addresses an enterprise connection directly. Accepts a bare id (ocon_…) or an oidc:-prefixed form.

Example:

"ocon_01jqebhswje1ka1z7ahr9rfsgt"

redirect_uri
string

URI to redirect to after authentication. Must be allowlisted for the app. Falls back to the connection's default_redirect_uri when omitted.

Example:

"https://app.acme.com/callback"

code_challenge_method
enum<string>
Available options:
S256
Example:

"S256"

dispatch_id
string

The identifier of the dispatch from the front-end SDK.

Example:

"123e4567-e89b-12d3-a456-426614174000"

Response

OK

authorization_url
string
required

The URL to redirect the user to for OAuth authorization.

Example:

"https://accounts.google.com/o/oauth2/v2/auth?client_id=...&redirect_uri=...&scope=openid+email&state=..."