Skip to main content
GET
Initiate SAML login (resolve by email)

Query Parameters

email
string<email>
required

The email whose domain resolves the SAML connection.

Example:

"jane@acme.com"

redirect_uri
string

URI to redirect to after authentication. Must be allowlisted for the app. Falls back to the connection's default_redirect_uri when omitted.

Example:

"https://app.acme.com/callback"

code_challenge
string

PKCE code challenge (S256) bound to the eventual login finalize.

Example:

"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"

dispatch_id
string

The identifier of the dispatch from the front-end SDK.

Example:

"123e4567-e89b-12d3-a456-426614174000"

Response

OK

redirect_url
string
required

The Identity Provider URL to redirect the user to.

Example:

"https://acme.okta.com/app/abc/sso/saml?SAMLRequest=...&RelayState=..."