Sign in through an organization's SSO
This endpoint is used to sign in with an SSO provider. It redirects to the provider's authorization URL
sessiongamma.session_token<token>The session cookie a sign-in sets. Over HTTPS its name carries the __Secure- prefix. Browsers send it on their own; other clients keep it from the sign-in response.
application/json- body
email?stringThe email address to sign in with. Used to resolve the provider via the email domain; optional if providerId, domain, or organizationSlug is provided.
organizationSlug?stringThe slug of the organization to sign in with.
providerId?stringThe ID of the provider to sign in with. Can be provided instead of email.
domain?stringThe email domain of the provider. Can be provided instead of email.
callbackURL*stringThe URL to redirect to after successful sign-in.
errorCallbackURL?stringThe URL to redirect to if the sign-in flow fails.
newUserCallbackURL?stringThe URL to redirect to after sign-in if the user is newly registered.
scopes?array<string>Scopes to request from the provider.
loginHint?stringLogin hint to send to the identity provider (e.g., email or identifier). If supported, sent as 'login_hint'.
additionalParams?Extra query parameters to append to the OIDC provider authorization URL. RFC 6749 reserved keys (state, client_id, redirect_uri, response_type, code_challenge, code_challenge_method, scope) are rejected. Not supported for SAML providers.
requestSignUp?booleanExplicitly request sign-up. Useful when disableImplicitSignUp is true for this provider.
providerType?stringThe provider protocol to sign in with.
"oidc""saml"Authorization URL generated successfully for SSO sign-in
application/json- response
url*stringThe authorization URL to redirect the user to for SSO sign-in
uriredirect*trueIndicates that the client should redirect to the provided URL
truecurl -X POST 'http://localhost:3000/api/auth/sign-in/sso' \ -H 'Content-Type: application/json' \ -d '{ "callbackURL": "string"}'{ "url": "http://example.com", "redirect": true}