Skip to main content
GET
Start an SSO login

Query Parameters

email
string
required

Email address of the person signing in. The tenant is derived from it server-side; it is never accepted from the caller.

Example:

"user@acme.com"

provider
string
required

Name of the SSO provider to sign in with, as returned in provider.id by POST /v1/sso/discover.

Example:

"acme-oidc"

code_challenge
string
required

S256 PKCE challenge (base64url, 43 characters). The matching verifier must be presented on the sso_code grant of POST /v1/login/oauth/access_token.

Example:

"OgkYf8C0dZA55KwBPshQ5lPH4Fk3NCPRUkpnrJL8fgs"

Response

Found