Skip to content

SSOConnection.create

POST /{namespace}/sso-connections

Creates a SSO Connection.

Mode
do
Event
SSOConnection.created

Create makes a new SSO Connection from the inputs below. It is inherited: every Noun has get, list, create, update and delete.

Inputs

InputTypeRequiredDescription
protocolstringrequiredHow sign-in is asserted: saml or oidc.
certificateExpiresAtdatetimeWhen the signing certificate expires; the Customer’s admin hears 30 days before.
testedAtdatetimeWhen the Customer’s admin last completed a test sign-in.
tenantTenantA Tenant’s people sign in through its SSO Connections; the Customer’s admin owns each one.

Outputs

OutputTypeRequiredDescription
ssoConnectionSSO ConnectionrequiredThe SSO Connection.

Effects

  • Emits SSOConnection.created.
  • Two-way: try, send, do.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.SSOConnection.create

When it waits

GateDefault
Decision classLow: two-way, nothing at stake
Delay windowNone: it runs once review passes.
LimitThe call Limit of the Permission it runs under.
Over the LimitIt waits pending for an Approval from the Founder. Approved, it runs; refused, it ends refused with limit-exceeded; unanswered by its deadline, it ends canceled.