Skip to content

SSOConnection.failed

Sign-ins through an SSO Connection started failing, from an expired certificate or a change on the Customer’s side.

PropertyValue
Raised byNo Verb: the rail raises it
NounSSO Connection
MovesSSO Connection active to failing
WakesNone.

Payload

Each delivery is an Event record. data holds the SSO Connection as it stands, and previous holds the state it left.

FieldTypeRequiredDescription
namestringrequiredSSOConnection.failed.
atdatetimerequiredWhen it happened.
seqintegerIts position in the namespace, one more than the Event before; any seq is a cursor into the history.
datajsonrequiredThe Thing as the Action left it.
data.ssoConnectionSSO ConnectionrequiredThe SSO Connection as the change left it.
data.ssoConnection.protocolstringrequiredHow sign-in is asserted: saml or oidc.
data.ssoConnection.statestringrequiredWhere it stands; only active signs anyone in.
data.ssoConnection.certificateExpiresAtdatetimeWhen the signing certificate expires; the Customer’s admin hears 30 days before.
data.ssoConnection.testedAtdatetimeWhen the Customer’s admin last completed a test sign-in.
data.causestringrequiredWhat failed: certificateExpired, signatureInvalid, or providerUnreachable.
data.previous.statestringrequiredThe state before this Event: active.

Example

JSON
{
  "$id": "https://api.sb/leaseline.app/events/evt_8dZ0ubvcIR",
  "$type": "Event",
  "name": "SSOConnection.failed",
  "at": "2026-10-22T12:00:00Z",
  "data": {
    "ssoConnection": {
      "$id": "https://api.sb/leaseline.app/sso-connections/sso_gFlPhZJ7A7",
      "$type": "SSOConnection",
      "protocol": "saml",
      "state": "failing",
      "certificateExpiresAt": "2026-10-22T12:00:00Z",
      "testedAt": "2026-10-22T12:00:00Z"
    },
    "cause": "certificateExpired",
    "previous": {
      "state": "active"
    }
  },
  "seq": 2783
}