Identity_provider_create

POST/identity-providers

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

attribute_mappings?null|

domains*array<string>

Verified email domains the IdP serves. Required non-empty. Each domain must already exist + be verified in the org's /domains; the handler also rejects overlaps with other IdpRecords in the same org so a given email domain routes to exactly one IdP (#308 follow-up — supports parent/subsidiary orgs without a user-facing IdP picker).

enabled?boolean|null

name*string

oidc?null|

protocol*IdpProtocol

Required. Issue #311 prohibits SCIM-only configurations: every IdpRecord must carry a federation protocol.

Value in

"saml"
"oidc"

saml?null|

scim?null|

Response Body

`application/json`

curl -X POST "https://example.com/identity-providers" \  -H "Content-Type: application/json" \  -d '{    "domains": [      "string"    ],    "name": "string",    "protocol": "saml"  }'

{  "attribute_mappings": null,  "cognito_provider_name": "string",  "created_at": "string",  "domains": [    "string"  ],  "enabled": true,  "id": "string",  "last_sync_at": "string",  "name": "string",  "oidc": null,  "org_id": "string",  "protocol": "saml",  "saml": null,  "scim": null,  "updated_at": "string"}

Request Body

Response Body

201application/json

400

`application/json`