Create SAML connection
Create a SAML SSO connection for a provider. Provide exactly one IdP
source: idp_metadata_url, idp_metadata_xml, or an explicit idp
block. The Service Provider (SP) endpoints in the response are derived
from the app domain and the generated connection ID, and are immutable.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The id of the app the request refers to. An application's unique identifier.
"54e9ujn"
"fvua38g"
The SAML provider identifier.
"okta"
"google"
"jumpcloud"
Body
"Acme Okta"
true
App domain baked into the SP endpoints. Optional when the app has exactly one active domain; required for multi-domain apps.
"session.acme.com"
HTTPS URL to the IdP's metadata document. Provide exactly one IdP source.
"https://acme.okta.com/app/abc/sso/saml/metadata"
Raw or base64-encoded IdP metadata XML (for air-gapped IdPs). Provide exactly one IdP source.
Explicit IdP block. Provide this only when you are not using
idp_metadata_url or idp_metadata_xml. Certificates accept raw PEM
or base64-wrapped PEM.
Maps SAML assertion attributes to user profile fields. Defaults are applied per provider when omitted.
Response
Created