SSO Connection routes: create, get, list
The SSO Connection Verbs create, get, list as api.sb routes, with inputs, result, refusals and an example.
Reference for SSO Connection, one group of SSO Connection routes.
SSOConnection.create
Creates a SSO Connection. Verb page.
POST /{namespace}/ sso-connectionsBody, as JSON: the inputs. Emits SSOConnection.created.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
protocol | string | required | How sign-in is asserted: saml or oidc. |
certificateExpiresAt | datetime | When the signing certificate expires; the Customer’s admin hears 30 days before. | |
testedAt | datetime | When the Customer’s admin last completed a test sign-in. | |
tenant | Tenant | A Tenant’s people sign in through its SSO Connections; the Customer’s admin owns each one. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
ssoConnection | SSO Connection | required | The SSO Connection. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
curl -X POST https: //api.sb/ leaseline.app/ sso-connections \
-H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
-H "Content-Type: application/ json" \
-d '{"protocol": "saml"}'{
"api": "https: //api.sb/ leaseline.app",
"ssoConnection": {
"$id": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7",
"$type": "SSOConnection",
"protocol": "saml",
"state": "draft"
},
"action": {
"$id": "https: //api.sb/ leaseline.app/ actions/ act_br07HsG8MG",
"operation": "SSOConnection.create",
"status": "done"
},
"links": {
"self": "https: //api.sb/ leaseline.app/ actions/ act_br07HsG8MG"
}
}SSOConnection.get
Returns one SSO Connection by id. Verb page.
GET /{namespace}/ sso-connections/ {id}Path: id. Query: the other inputs. Reads only: it emits no Event.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
id | string | required | The id of the SSO Connection. |
at | string | A time or Version name: the record as it stood then. Unset: as it stands now. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
ssoConnection | SSO Connection | required | The SSO Connection. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
curl https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7 \
-H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"{
"api": "https: //api.sb/ leaseline.app",
"$type": "SSOConnection",
"$id": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7",
"ssoConnection": {
"$id": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7",
"$type": "SSOConnection",
"protocol": "saml",
"state": "draft"
},
"links": {
"self": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7",
"up": "https: //api.sb/ leaseline.app/ sso-connections"
},
"actions": {
"activate": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7/ activate",
"deactivate": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7/ deactivate"
}
}SSOConnection.list
Returns SSO Connections, newest first, one page at a time. Verb page.
GET /{namespace}/ sso-connectionsQuery: the inputs. Reads only: it emits no Event.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
limit | integer | At most this many records, up to 100. The default is 20. | |
after | string | The cursor from the previous page. | |
where | string | A filter over the properties, such as paidAt = null and total.amount > 500. | |
sort | string | Properties to sort by, comma-separated; a leading minus sorts descending. | |
total | boolean | True adds the match count as meta.total, exact up to 10,000 matches and estimated above. | |
facets | string | Properties to count by value, comma-separated, returned as meta.facets. | |
fields | string | Properties to return on each record, comma-separated; $id and $type always return. | |
include | string | Related records to embed in place of their URLs, comma-separated. | |
depth | integer | How many levels of related records to embed. The default is 1. | |
q | string | Words to match across the text properties, ranked by relevance. | |
match | string | Ranks the search by words, or meaning; words is the default. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
ssoConnections | list of SSO Connection | required | One page of SSO Connections. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
curl "https: //api.sb/ leaseline.app/ sso-connections? limit= 20" \
-H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"{
"api": "https: //api.sb/ leaseline.app",
"$type": "SSOConnection",
"ssoConnections": [
{
"$id": "https: //api.sb/ leaseline.app/ sso-connections/ sso_gFlPhZJ7A7",
"$type": "SSOConnection",
"protocol": "saml",
"state": "draft"
}
],
"meta": {
"limit": 20,
"after": "sso_gFlPhZJ7A7"
},
"links": {
"self": "https: //api.sb/ leaseline.app/ sso-connections? limit= 20",
"next": "https: //api.sb/ leaseline.app/ sso-connections? after= sso_gFlPhZJ7A7"
}
}