Register SSO Provider

POST

https://c-auth.mvscloud.com/api/auth/sso/register

POST

/api/auth/sso/register

$ curl -X POST https://c-auth.mvscloud.com/api/auth/sso/register \
>      -H "Authorization: Bearer <token>" \
>      -H "Content-Type: application/json" \
>      -d '{
>   "providerId": "string",
>   "issuer": "string",
>   "domain": "string"
> }'

1 {
2   "issuer": "string",
3   "domain": "string",
4   "oidcConfig": {
5     "issuer": "string",
6     "pkce": true,
7     "clientId": "string",
8     "clientSecret": "string",
9     "discoveryEndpoint": "string",
10     "authorizationEndpoint": "string",
11     "userInfoEndpoint": "string",
12     "scopes": [
13       "string"
14     ],
15     "tokenEndpoint": "string",
16     "tokenEndpointAuthentication": "client_secret_post",
17     "jwksEndpoint": "string",
18     "mapping": {
19       "id": "string",
20       "email": "string",
21       "name": "string",
22       "emailVerified": "string",
23       "image": "string",
24       "extraFields": {}
25     }
26   },
27   "userId": "string",
28   "providerId": "string",
29   "redirectURI": "string",
30   "domainVerified": true,
31   "domainVerificationToken": "string",
32   "organizationId": "string"
33 }

This endpoint is used to register an OIDC provider. This is used to configure the provider and link it to an organization

Authentication

AuthorizationBearer

Bearer token authentication

Request

This endpoint expects an object.

providerIdstringRequired

The ID of the provider. This is used to identify the provider during login and callback

issuerstringRequired

The issuer URL of the provider

domainstringRequired

The domain(s) of the provider. For enterprise multi-domain SSO where a single IdP serves multiple email domains, use comma-separated values (e.g., ‘company.com,subsidiary.com,acquired-company.com’)

oidcConfigobject or nullOptional

samlConfigobject or nullOptional

organizationIdstring or nullOptional

If organization plugin is enabled, the organization id to link the provider to

overrideUserInfoboolean or nullOptionalDefaults to false

Override user info with the provider info. Defaults to false

Response

OIDC provider created successfully

issuerstringformat: "uri"

The issuer URL of the provider

domainstring

The domain of the provider, used for email matching

oidcConfigobject

OIDC configuration for the provider

userIdstring

ID of the user who registered the provider

providerIdstring

Unique identifier for the provider

redirectURIstringformat: "uri"

The redirect URI for the provider callback

domainVerifiedboolean

A boolean indicating whether the domain has been verified or not

domainVerificationTokenstring

Domain verification token. It can be used to prove ownership over the SSO domain

organizationIdstring or null

ID of the linked organization, if any

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

500

Internal Server Error