Initiate SAML login (resolve by email)
Start an SP-initiated SAML SSO flow, resolving the connection from the
email’s domain. The domain must match exactly one enabled connection’s
email_domain_allowlist. On success, returns the IdP URL the SDK
navigates the user to; the IdP eventually posts a SAMLResponse back to
the connection’s ACS endpoint.
Query Parameters
The email whose domain resolves the SAML connection.
"jane@acme.com"
URI to redirect to after authentication. Must be allowlisted for
the app. Falls back to the connection's default_redirect_uri when
omitted.
"https://app.acme.com/callback"
PKCE code challenge (S256) bound to the eventual login finalize.
"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"
The identifier of the dispatch from the front-end SDK.
"123e4567-e89b-12d3-a456-426614174000"
Response
OK
The Identity Provider URL to redirect the user to.
"https://acme.okta.com/app/abc/sso/saml?SAMLRequest=...&RelayState=..."