SlashID Organization SSO config API
The Organization SSO config API from SlashID — 4 operation(s) for organization sso config.
The Organization SSO config API from SlashID — 4 operation(s) for organization sso config.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/slashid-organization-sso-config-api"
curl "https://apis.io/api/v1/apis?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: SlashID Organization SSO config API
description: "This is the [OpenAPI](https://www.openapis.org/) specification for communicating with the [SlashID](https://www.slashid.dev/) service.\n\nThe latest version of the OpenAPI API spec can be fetched from [our CDN](https://cdn.slashid.com/slashid-openapi-latest.yaml).\n\nWe recommend you use an [OpenAPI SDK generator](https://openapi.tools/#sdk) to create a client library in your programming language,\nbut you can also use this documentation to make HTTP calls directly.\n\n> **Compatibility note**: We aim to keep wire compatibility whenever we update the API, but parts of the specification may occasionally be refactored.\n If you use an SDK generator, your code may require minor changes between versions.\n"
version: '1.1'
termsOfService: https://www.slashid.dev/terms-of-use/
contact:
name: API Support
email: contact@slashid.dev
servers:
- url: https://api.slashid.com
description: Production
- url: https://api.sandbox.slashid.com
description: Sandbox
security:
- ApiKeyAuth: []
tags:
- name: Organization SSO config
paths:
/organizations/sso/saml/provider-credentials:
parameters:
- $ref: '#/components/parameters/OrgIDHeader'
get:
operationId: GetOrganizationsSamlProviderCredentials
x-rbac-enabled: true
x-rbac-allowed-groups: admin,member,saml-admin
x-manager-rbac-allowed-groups: admin,member
tags:
- Organization SSO config
summary: List SAML credentials for SSO
description: 'Returns a list of existing SAML provider credentials for SSO for your organization.
'
responses:
'200':
description: OK
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/APIResponseBase'
- type: object
properties:
result:
type: array
items:
$ref: '#/components/schemas/SAMLProviderCredentialsGetResponse'
required:
- result
'400':
$ref: '#/components/responses/BadRequest'
post:
operationId: PostOrganizationsSamlProviderCredentials
x-rbac-enabled: true
x-rbac-allowed-groups: admin,saml-admin
x-manager-rbac-allowed-groups: admin
tags:
- Organization SSO config
summary: Create a new set of SAML provider credentials for SSO
description: 'Create a new set of SAML provider credentials for your organization to use with SSO.
'
parameters:
- $ref: '#/components/parameters/RequiredConsistencyHeader'
- $ref: '#/components/parameters/RequiredConsistencyTimeoutHeader'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/SAMLProviderCredentialsPostRequest'
responses:
'201':
description: OK
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/APIResponseBase'
- type: object
properties:
result:
$ref: '#/components/schemas/SAMLProviderCredentialsPostResponse'
required:
- result
'400':
$ref: '#/components/responses/BadRequest'
/organizations/sso/saml/provider-credentials/{saml_provider_credentials_id}:
parameters:
- $ref: '#/components/parameters/OrgIDHeader'
- $ref: '#/components/parameters/SAMLProviderCredentialsIDPathParam'
get:
operationId: GetOrganizationsSsoSamlProviderCredentialsSamlProviderCredentialsId
x-rbac-enabled: true
x-rbac-allowed-groups: admin,member,saml-admin
x-manager-rbac-allowed-groups: admin,member
tags:
- Organization SSO config
summary: Get an existing set of SAML provider credentials for SSO
description: 'Returns an existing set of SAML provider for SSO, specified by the provider credential ID.
'
responses:
'200':
description: OK
content:
application/json:
schema:
allOf:
- $ref: '#/components/schemas/APIResponseBase'
- type: object
properties:
result:
$ref: '#/components/schemas/SAMLProviderCredentialsGetResponse'
required:
- result
'400':
$ref: '#/components/responses/BadRequest'
'404':
$ref: '#/components/responses/NotFound'
delete:
operationId: DeleteOrganizationsSsoSamlProviderCredentialsSamlProviderCredentialsId
x-rbac-enabled: true
x-rbac-allowed-groups: admin,saml-admin
x-manager-rbac-allowed-groups: admin
tags:
- Organization SSO config
summary: Delete an existing set of SAML provider credentials for SSO
description: 'Deletes an existing set of SAML provider credentials for SSO, specified by the provider credential ID.
'
parameters:
- $ref: '#/components/parameters/RequiredConsistencyHeader'
- $ref: '#/components/parameters/RequiredConsistencyTimeoutHeader'
responses:
'204':
$ref: '#/components/responses/NoContent'
'400':
$ref: '#/components/responses/BadRequest'
'404':
$ref: '#/components/responses/NotFound'
patch:
operationId: PatchOrganizationsSsoSamlProviderCredentialsSamlProviderCredentialsId
x-rbac-enabled: true
x-rbac-allowed-groups: admin,saml-admin
x-manager-rbac-allowed-groups: admin
tags:
- Organization SSO config
summary: Modify an existing set of SAML provider credentials for SSO
description: Modifies an existing set of SAML provider credentials for SSO, specified by the provider credential ID.
parameters:
- $ref: '#/components/parameters/RequiredConsistencyHeader'
- $ref: '#/components/parameters/RequiredConsistencyTimeoutHeader'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/SAMLProviderCredentialsPatchRequest'
responses:
'204':
$ref: '#/components/responses/NoContent'
'400':
$ref: '#/components/responses/BadRequest'
'404':
$ref: '#/components/responses/NotFound'
components:
schemas:
SAMLProviderCredentialsPostRequest:
type: object
description: Request to create a new SAML provider credential
properties:
label:
description: A friendly free-form label to help you identify this set of SAML provider credentials.
type: string
idp_metadata_url:
description: The SAML IdP's metadata URL.
type: string
email_claims:
description: The names of the claims in the SAML response containing the users' email addresses. The first match is added to the person's set of handles.
type: array
items:
type: string
maxItems: 3
enable_in_slashid_oidc_authz_server:
type: boolean
description: Indicates whether these credentials can be used for SSO authentication during an OIDC flow in which SlashID acts as the Authorization Server.
required:
- idp_metadata_url
APICursorPagination:
type: object
required:
- limit
- cursor
- total_count
properties:
limit:
type: integer
cursor:
type: string
total_count:
type: integer
format: int64
APIMeta:
type: object
properties:
pagination:
$ref: '#/components/schemas/APIPagination'
cursor_pagination:
$ref: '#/components/schemas/APICursorPagination'
APIPagination:
type: object
required:
- limit
- offset
- total_count
properties:
limit:
type: integer
offset:
type: integer
total_count:
type: integer
format: int64
SAMLProviderCredentials:
type: object
description: A SAML provider credential
properties:
id:
$ref: '#/components/schemas/SAMLProviderCredentialsID'
label:
description: A friendly free-form label to help you identify this set of SAML provider credentials.
type: string
idp_metadata_url:
description: The SAML IdP's metadata URL.
type: string
email_claims:
description: The names of the claims in the SAML response containing the users' email addresses. The first match is added to the person's set of handles.
type: array
items:
type: string
maxItems: 3
enable_in_slashid_oidc_authz_server:
type: boolean
description: Indicates whether these credentials can be used for SSO authentication during an OIDC flow in which SlashID acts as the Authorization Server.
required:
- id
- idp_metadata_url
SAMLProviderCredentialsPatchRequest:
type: object
description: Request to modify an existing SAML provider credential
properties:
label:
description: A friendly free-form label to help you identify this set of SAML provider credentials.
type: string
idp_metadata_url:
description: The SAML IdP's metadata URL.
type: string
email_claims:
description: The names of the claims in the SAML response containing the users' email addresses. The first match is added to the person's set of handles.
type: array
items:
type: string
maxItems: 3
enable_in_slashid_oidc_authz_server:
type: boolean
description: Indicates whether these credentials can be used for SSO authentication during an OIDC flow in which SlashID acts as the Authorization Server.
SAMLProviderCredentialsPostResponse:
$ref: '#/components/schemas/SAMLProviderCredentials'
APIResponseBase:
type: object
properties:
meta:
$ref: '#/components/schemas/APIMeta'
errors:
type: array
items:
$ref: '#/components/schemas/APIResponseError'
APIResponseError:
type: object
properties:
httpcode:
type: integer
message:
type: string
SAMLProviderCredentialsGetResponse:
$ref: '#/components/schemas/SAMLProviderCredentials'
SAMLProviderCredentialsID:
type: string
parameters:
RequiredConsistencyTimeoutHeader:
name: SlashID-Required-Consistency-Timeout
in: header
description: 'The maximum amount of seconds to wait for the requested consistency level to be achieved. If the consistency level is not achieved within this time, the request will fail with a 408 Request Timeout error.
408 Request Timeout error indicates that request was not handled within the timeout, but it may still be handled after request timeout.
You can learn more about our replication model on our [Cross-region Replication Model](/docs/access/concepts/replication) page.
'
schema:
type: integer
default: 30
maximum: 120
minimum: 1
OrgIDHeader:
name: SlashID-OrgID
in: header
schema:
type: string
required: true
description: The organization ID
example: af5fbd30-7ce7-4548-8b30-4cd59cb2aba1
SAMLProviderCredentialsIDPathParam:
name: saml_provider_credentials_id
description: The SAML provider credentials ID
in: path
required: true
schema:
$ref: '#/components/schemas/SAMLProviderCredentialsID'
RequiredConsistencyHeader:
name: SlashID-Required-Consistency
in: header
description: 'The consistency level required for this request. If the consistency level is not achieved within the timeout, the request will fail with a 408 Request Timeout error.
408 Request Timeout error indicates that request was not handled within the timeout, but it may still be handled after request timeout.
Allowed values: * `local_region`: Wait while the request executes in the local region. * `all_regions`: Wait while the request executes across all regions.
You can learn more about our replication model on our [Cross-region Replication Model](/docs/access/concepts/replication) page.
'
schema:
type: string
enum:
- local_region
- all_regions
default: local_region
responses:
NoContent:
description: No content
NotFound:
description: Not Found
content:
application/json:
schema:
$ref: '#/components/schemas/APIResponseBase'
BadRequest:
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/APIResponseBase'
securitySchemes:
ApiKeyAuth:
description: Authorizes the request with the organization's API Key.
x-svc-um-api: true
type: apiKey
in: header
name: SlashID-API-Key
OAuth2ClientIdSecret:
description: Authorizes the request with a client ID/client secret pair
type: http
scheme: basic
OAuth2AccessTokenBearer:
description: Authorizes the request with an Access Token for the current user.
type: http
scheme: bearer
bearerFormat: opaque