Skip to main content

RegisterSSOProvider

POST 
/v1/sso-providers:register

RegisterSSOProvider creates the deployment's SSO provider row. It refuses with ALREADY_EXISTS when the row exists, so a console that only wants to create cannot overwrite a live provider. It also links the organization whose slug is the provider id.

customer_id names the authorization target (ADR 093), not the rows: the provider row is deployment-wide. A platform administrator passes for any customer. An organization administrator, or a holder of an organization sso_providers.create grant, passes only when RBAC_AUTH_DB_MODE is "single" and customer_id is the customer of the deployment. A call with an API key and a customer_id is refused.

Request​

Responses​

Success