Create the workspace SSO integration

Creates the workspace's single AuthIntegration and links the calling admin's user record to it.

Constraints:

  • Enterprise plans only — any other plan gets 403.
  • One integration per workspace; a second create attempt returns 409.
  • redirectUrl, when supplied, is validated against the allowed-host rules and must be a secure URL.
  • config is validated per protocol; the required keys differ between providers.

A generated 16-character integrationId is returned; that value identifies the integration in the SSO login URLs.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
curl -X POST 'https://apis.elai.io/api/v1/sso' \
  -H 'Authorization: Bearer YOUR_API_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
  "protocol": "oidc",
  "config": {
    "issuer": "https://login.example.com",
    "clientId": "elai-web",
    "clientSecret": "s3cr3t-value"
  },
  "authByInvite": false,
  "anonymizeUsers": false,
  "redirectUrl": "https://app.example.com/after-login"
}'
Body Params

SSO configuration payload. config requirements depend on protocol.

string
required

Identity protocol, e.g. oidc.

config
object
required

Protocol-specific settings. On update, a clientSecret starting with *** is ignored so the stored secret survives.

boolean

Coerced with Boolean(); any truthy value enables it.

boolean

Coerced with Boolean().

uri
Responses

config.clientSecret comes back masked.

message explains why.

PUT /sso to change it.

Language
Credentials
Header
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json