# SSO Connection methods: create, get, list

URL: /code/sdk/sso-connection/records · Id: `page:code/sdk/sso-connection/records`

> The SSO Connection Verbs create, get, list as typed SDK methods, with inputs, result, refusals and an example.

Reference for [SSO Connection](/business/nouns/sso-connection), one group of [SSO Connection methods](/code/sdk/sso-connection).

### SSOConnection.create
Creates a SSO Connection. [Verb page](/business/nouns/sso-connection/create?interface=sdk).

```ts
interface SSOConnectionVerbs {
  create(input: SSOConnectionCreateInput, options?: SB.CallOptions): SB.Call<SSOConnection>
}
```

Emits `SSOConnection.created`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `protocol` | `string` | Yes | How sign-in is asserted: `saml` or `oidc`. |
| `certificateExpiresAt` | `datetime` | No | When the signing certificate expires; the Customer’s admin hears 30 days before. |
| `testedAt` | `datetime` | No | When the Customer’s admin last completed a test sign-in. |
| `tenant` | [Tenant](/business/nouns/tenant) | No | A Tenant’s people sign in through its SSO Connections; the Customer’s admin owns each one. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `ssoConnection` | [SSO Connection](/business/nouns/sso-connection) | Yes | The SSO Connection. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```ts
import { $ } from 'startup-builder'

const ssoConnection = await $.SSOConnection.create({ protocol: 'saml' })
```

### SSOConnection.get
Returns one SSO Connection by id. [Verb page](/business/nouns/sso-connection/get?interface=sdk).

```ts
interface SSOConnectionVerbs {
  get(input: SSOConnectionGetInput, options?: SB.CallOptions): SB.Call<SSOConnection>
}
```

Reads only: it emits no Event.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the SSO Connection. |
| `at` | `string` | No | A time or Version name: the record as it stood then. Unset: as it stands now. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `ssoConnection` | [SSO Connection](/business/nouns/sso-connection) | Yes | The SSO Connection. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```ts
import { $ } from 'startup-builder'

const ssoConnection = await $.SSOConnection.get({ id: 'sso_gFlPhZJ7A7' })
```

### SSOConnection.list
Returns SSO Connections, newest first, one page at a time. [Verb page](/business/nouns/sso-connection/list?interface=sdk).

```ts
interface SSOConnectionVerbs {
  list(input?: SSOConnectionListInput, options?: SB.CallOptions): SB.ListCall<SSOConnection>
}
```

Reads only: it emits no Event.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `limit` | `integer` | No | At most this many records, up to 100. The default is 20. |
| `after` | `string` | No | The cursor from the previous page. |
| `where` | `string` | No | A filter over the properties, such as `paidAt = null and total.amount > 500`. |
| `sort` | `string` | No | Properties to sort by, comma-separated; a leading minus sorts descending. |
| `total` | `boolean` | No | True adds the match count as `meta.total`, exact up to 10,000 matches and estimated above. |
| `facets` | `string` | No | Properties to count by value, comma-separated, returned as `meta.facets`. |
| `fields` | `string` | No | Properties to return on each record, comma-separated; `$id` and `$type` always return. |
| `include` | `string` | No | Related records to embed in place of their URLs, comma-separated. |
| `depth` | `integer` | No | How many levels of related records to embed. The default is 1. |
| `q` | `string` | No | Words to match across the text properties, ranked by relevance. |
| `match` | `string` | No | Ranks the search by `words`, or `meaning`; words is the default. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `ssoConnections` | list of [SSO Connection](/business/nouns/sso-connection) | Yes | One page of SSO Connections. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```ts
import { $ } from 'startup-builder'

const ssoConnections = await $.SSOConnection.list({ limit: 20 })
```